witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF 移动安全框架（MobSF）是一个针对 Android、iOS 和 Windows Mobile 移动应用的安全研究平台。MobSF 可用于多种场景，如移动应用安全、渗透测试、恶意软件分析和隐私分析。静态分析器支持常见的移动应用二进制文件，如 APK、IPA、APPX 和源代码。同时，动态分析器支持 Android 和 iOS 应用，并提供了一个交互式检测测试、运行时数据和网络流量分析的平台。MobSF 通过 REST API 和 CLI 工具与您的 DevSecOps 或 CI/CD 流水线无缝集成，轻松增强您的安全工作流程...

SecuSphere

SecuSphere 您的全方位 DevSecOps 解决方案 欢迎使用 SecuSphere，满足您所有 DevSecOps 需求的一站式解决方案。我们的集中式平台经过专业设计，可管理和优化您的漏洞管理、CI/CD 流水线集成、安全评估和 DevSecOps 实践。 SecuSphere 是一个全面的 DevSecOps 平台，旨在简化并增强您的组织在整个软件开发生命周期中的安全态势。我们的平台充当漏洞管理、安全评估、CI/CD 流水线集成以及培育 DevSecOps 实践与文化的集中枢纽。 集中化漏洞管理 SecuSphere...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

ccs

Escáner de Credenciales en Código Este script está diseñado para escanear una base de código grande y diversa en busca de credenciales codificadas, o credenciales presentes en archivos de configuración. Estas representan un grave problema de seguridad y pueden ser extremadamente difíciles de...

api-security-audit-action

GitHub Action: 42Crunch REST API Static Security Testing The REST API Static Security Testing action locates REST API contracts that follow the OpenAPI Specification OAS, formerly known as Swagger and runs thorough security checks on them. Both OAS v2 and v3.0.x are supported, in both JSON and YA...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

automatic-api-attack-tool

Strumento Automatico di Attacco API Lo strumento di attacco API personalizzabile di Imperva prende una specifica API come input, e genera ed esegue attacchi basati su di essa come output. Lo strumento è in grado di analizzare una specifica API e creare scenari di attacco fuzzing basati su ciò che...

raptor

Raptor è uno scanner di vulnerabilità sorgente basato sul web web-service + UI incentrato su GitHub; scansiona un repository semplicemente con l'URL del repo GitHub. Puoi configurare webhook per garantire scansioni automatiche ogni volta che fai un commit o unisci una pull request. La scansione...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

كاشف CVE-2026-24061 لـ GNU inetutils Telnet أداة آمنة للكشف السلبي لتحديد التعرض المحتمل لثغرة CVE-2026-24061 ، وهي ثغرة تؤثر على إصدارات معينة من GNU inetutils telnet. صُمم هذا المشروع لـ خطوط أنابيب DevOps ، وعمليات تدقيق البنية التحتية ، ومحافظ الأمن الدفاعي. ما هي CVE-2026-24061؟ CVE-2026-240...

nuclei-action

यह Nuclei Action Nuclei को GitHub Action के साथ ऑर्केस्ट्रेट करना आसान बनाता है। अपने सभी Nuclei Templates को शक्तिशाली निरंतर सुरक्षा वर्कफ़्लो में एकीकृत करें और इसे अपने सुरक्षित सॉफ़्टवेयर डेवलपमेंट जीवन चक्र का हिस्सा बनाएं। Nuclei Action अनुकूलता v3.0.0+ Node.js v24 पर चलता है और CLI-प्रथम...

muad-dib

Installazione | Utilizzo | Funzionalità | VS Code | CI/CD Versione francese Perché MUAD'DIB?...

Aurea

Aurea – Goldene Standards für IaC-Sicherheit Tagline: Goldene Standards für IaC-Sicherheit Aurea ist eine vollständig Open-Source-, KI-gestützte Sicherheitsplattform , die darauf ausgelegt ist, Infrastructure-as-Code IaC zu sichern. Sie unterstützt Terraform, Kubernetes, Docker und Ansible und...

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS ist ein schneller und vielseitiger CLI-Scanner für Web-Cache-Poisoning und Web-Cache-Deception, entwickelt von Hackmanit und Maximilian Hildebrand. Der Scanner unterstützt viele verschiedene Web-Cache-Poisoning- und Web-Cache-Deception-Techniken, enthält einen...

murphysec

中文 | IT MurphySec CLI è uno strumento per rilevare dipendenze vulnerabili dalla riga di comando e può essere integrato nel tuo pipeline CI/CD. Funzionalità 1. Analizza le dipendenze utilizzate dal tuo progetto, incluse quelle dirette e indirette 2. Rileva vulnerabilità note nelle dipendenze del...

sslyze

SSLyze SSLyze è uno strumento di scansione SSL/TLS rapido e potente, nonché una libreria Python. SSLyze può analizzare la configurazione SSL/TLS di un server connettendosi ad esso, per garantire che utilizzi impostazioni di crittografia robuste certificato, suite di cifratura, curve ellittiche,...

pythia-sql-clairvoyance

Scanner de injeção SQL pronto para produção com 6 métodos de detecção, remediação baseada em IA, saída SARIF e integração CI/CD. Início Rápido · Documentação · Docker · Análise com IA · Estrela no GitHub...

Qualys released QScanner – a console vulnerability scanner for container images

QualysreleasedQScanner - a console vulnerability scanner for container images. Feed it an image and get a list of vulnerabilities a la Trivy. It supports: " Local Runtimes: Scan images from Docker, Containerd, or Podman. Local Archives: Analyze Docker images or OCI layouts from local files. Remot...

APKDeepLens - Android Security Insights In Full Spectrum

APKDeepLens is a Python based tool designed to scan Android applications APK files for security vulnerabilities. It specifically targets the OWASP Top 10 mobile vulnerabilities, providing an easy and efficient way for developers, penetration testers, and security researchers to assess the securit...

SecuSphere - Efficient DevSecOps

SecuSphere is a comprehensive DevSecOps platform designed to streamline and enhance your organization's security posture throughout the software development life cycle. Our platform serves as a centralized hub for vulnerability management, security assessments, CI/CD pipeline integration, and...