pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

open-source-web-scanners

open-source-web-scanners A list of open source web security scanners on GitHub and GitLab, ordered by Stars. It does not provide in-depth analysis - for more analysis or a wider range of tools, see the links below. Note that some large projects have multiple repos - in which case the second most...

Sn1per

Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per — The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...

WhatWeb

WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...

wprecon

WPRecon A powerful, template-driven WordPress reconnaissance and vulnerability scanning tool Features • Installation • Usage • Architecture • Templates 📋 Overview WPRecon is a modern WordPress security reconnaissance tool built with Go that helps security engineers identify vulnerabilities,...

seccubus

Seccubus 소개 Seccubus는 다양한 도구를 사용하여 정기적인 취약점 스캔을 자동화하고, 보안 담당자가 첫 스캔과 반복 스캔 모두에서 그 출력을 신속하게 분석하도록 돕습니다. 반복 스캔에서 델타 보고는 발견 항목이 스캔 결과에 처음 나타나거나 해당 출력이 변경될 때만 판단하면 되도록 보장합니다. Seccubus 2.x는 유일하게 활발히 개발되고 유지 관리되는 브랜치이며, Seccubus V1에 대한 모든 지원은 공식적으로 중단되었습니다. Seccubus V2는 다음 스캐너와 함께 작동합니다: Nessus OpenVAS...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make...

apache-flink-directory-traversal.nse

이 저장소에는 README가 없습니다...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

Nettacker

OWASP Nettacker...

NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

openvas-scanner

OpenVAS 스캐너 이것은 Greenbone Community Edition의 OpenVAS 스캐너입니다. Greenbone Enterprise 어플라이언스에 사용되며, 지속적으로 업데이트되고 확장되는 취약점 테스트VT 피드를 실행하는 완전한 기능을 갖춘 스캔 엔진입니다. 릴리스 모든 릴리스 파일은 Greenbone Community Feed 무결성 키로 서명됩니다. 이 gpg 키는 https://www.greenbone.net/GBCommunitySigningKey.asc 에서 다운로드할 수 있으며 지문은 8AE4 BE42...

asterion-network-minotaur

Ethical network security auditor — 50+ checks across SMB, RDP, LDAP, SSH, Kerberos and more, with AI-powered CVE analysis and OWASP/CIS/NIST compliance mapping. Quick Start · Documentation · Docker · AI Features · Star on GitHub In Action Local scan · 127.0.0.1 ·...

api-scanner-docker

API Scanner - 자체 호스트 배포 API Scanner는 REST 및 SOAP API의 취약점을 OpenAPI/Swagger 명세서와 WSDL 파일을 사용해 스캔하는 자동화된 API 보안 테스트 도구입니다. 전제 조건 Docker Engine 20.10+ Docker Compose v2 Python 3.6+ 설정 스크립트용 8 GB RAM 최소 16 GB 권장 20 GB 디스크 공간 빠른 시작 1. 이 저장소 클론 root@kitploit: git clone...

dump

Dump このリポジトリには、廃止された/未完成のプロジェクト、小さなスクリプト、またはそれだけでリポジトリを持つに値しないものが含まれています。 内容 git-gat : プライベートなGitリポジトリを見つけるためのポストエクスプロイテーションスクリプト Infinity 廃止 : 任意のFacebookユーザーの電話番号を見つける json2paths : JSONキーをパスに変換し、隠れたエンドポイントを見つける jsonpy : 効率的なJSONコールバック脆弱性スキャナー reverse-domain : 指定されたドメインと同じサーバーでホストされているドメインを見つける...

flan

Flan Scan은 가벼운 네트워크 취약점 스캐너입니다. Flan Scan을 사용하면 네트워크에서 열려 있는 포트를 쉽게 찾고, 서비스와 버전을 식별하며, 네트워크에 영향을 미치는 관련 CVE 목록을 얻을 수 있습니다. Flan Scan은 Nmap과 vulners 스크립트를 래핑하여 Nmap을 본격적인 네트워크 취약점 스캐너로 변환합니다. Flan Scan을 사용하면 컨테이너 내에서 Nmap을 로컬로 쉽게 배포하고, 결과를 클라우드로 푸시하며, Kubernetes에서 스캐너를 배포할 수 있습니다. 시작하기 1. 이 저장소를...

XAttacker

XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...