cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

plecost

Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...

kics

!checkmarxhttps://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAA7EAAAOxAGVKw4bAAADbklEQVRYhc2XTWidRRSGn3MJl1AkZFFcFCkFIYKC...

AtomShields-cli

AtomShields Cli AtomShields Cli is a Command-Line Interface to use the software AtomShields .. raw:: html Installation .. code-block:: shell pip install atomshieldscli Basic usage .. code-block:: shell ascli --target --name The allowed action values are: install : To install a checker or a...

salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

openapi_security_scanner

OpenAPI Security Scanner About The Project Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the security scanners mainly looking for SQLi, XSS, RCE instead of looking...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

gosec

gosec - Средство проверки безопасности Go Проверяет исходный код на проблемы безопасности путем сканирования AST и SSA представления кода Go. Быстрые ссылки GitHub Action Локальная установка Быстрый старт Типовые шаблоны использования Выбор правил Форматы вывода Возможности Правила на основе...

hsecscan

hsecscan Сканер безопасности для заголовков HTTP-ответов. Требования Python 2.x Модули Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Установка root@kitploit: $ pip install hsecscan Использование root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

react2shell-scanner

react2shell-guard CVE-2025-55182 에 대한 보안 스캐너 - React Server Components의 중요한 CVSS 10.0 인증되지 않은 원격 코드 실행 취약점입니다. ⚠️ 면책 조항 이것은 보안 스캐너 이며, 익스플로잇 도구가 아닙니다. 개발자와 보안 팀이 프로젝트의 취약한 종속성을 식별하는 데 도움을 주기 위해 설계되었습니다. 이것은 커뮤니티 기반 오픈 소스 프로젝트 이며, 명시적이든 묵시적이든 어떠한 종류의 보증 없이 "있는 그대로" 제공됩니다. 저자와 기여자는 이 도구 사용으로 인해 발생하는...

Gixy-Next

Gixy-Next: NGINX Configuration Security Scanner for Security Audits Overview Gixy-Next Gixy is an open-source NGINX configuration security scanner and hardening tool that statically analyzes your nginx.conf to detect security misconfigurations, hardening gaps, and common performance pitfalls befo...

Gixy-Next

Gixy-Next: NGINX Configuration Security Scanner for Security Audits Обзор Gixy-Next Gixy — это сканер безопасности конфигурации NGINX и инструмент для усиления защиты с открытым исходным кодом, который статически анализирует ваш nginx.conf и выявляет ошибочные настройки безопасности, пробелы в...

threatmap

threatmap...

medusa

🐍 MEDUSA - AI 보안 스캐너...

WPKiller

WPKiller v1.0 ✔ 워드프레스 보안 스캐너, WPKiller는 워드프레스 사이트의 취약점을 검색하고, 플러그인을 스캔하며, 맞춤형 익스플로잇 버전과 플러그인을 찾을 수 있게 해줍니다. 설치 이 도구를 어떻게 설치하나요? root@kitploit: $ git clone https://github.com/Dark-Grizzly/WPKiller $ cd WPKiller $ chmod +x wpkiller.py $ pip install -r requirements.txt $ python wpkiller.py...

mcp-shark

mcp-shark AIエージェントツール用セキュリティスキャナ — IDEでMCPを扱うセキュリティ/プラットフォームエンジニア向け。 MCP IDE設定 と埋め込みツールメタデータに対してローカル静的scanを実行：41のルール （AAuth可視性 を含む）、トキシックフローヒューリスティクス、SARIF / HTML / JSON レポート。ホスト型の設定スキャンバックエンドはありません。 任意のローカルHTTPプロキシ とブラウザ内ダッシュボード...