cfn_nag

Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...

CMSScan

CMSScan Scan WordPress, Drupal, Joomla, vBulletin websites for Security issues. Made with in India CMSScan provides a centralized Security Dashboard for CMS Security scans. It is powered by wpscan, droopescan, vbscan and joomscan. It supports both on demand and scheduled scans and has the ability...

SafeForge

SafeForge – Where Apps Are Built with Trust SafeForge is an open-source mobile app hub built on GitLab that allows developers to build, upload, share, and collaborate on mobile applications in a secure, AI-verified, and fully encrypted ecosystem. Every application submitted to SafeForge is analyz...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI root@kitploit: / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | |||...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. root@kitploit:...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

mcp-xray

MCP X-Ray Overview MCP X-Ray is a unified open-source security scanning and penetration testing solution for Model Context Protocol MCP servers. It generates production-ready SARIF reports for seamless integration with security tooling and CI/CD pipelines. Scan results can be optionally uploaded ...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

layne

Layne Layne is a self-hosted GitHub App that centralizes security scanning across our repositories. Since we don't use commercial SAST/secrets scanning tools, nor we have access to GitHub Enterprise, it can get hard to maintain different GitHub Actions workflow files across different repositories...

semgrep-rules

semgrep-rules Welcome! This repository contains Semgrep's Community Edition rules. In addition to the rules in this repository, the Semgrep Registry offers proprietary Pro rules that offer additional language coverage, and unlock crossfile and deep dataflow analysis. Find rules: search for...

oxo

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

truegaze

truegaze Инструмент статического анализа для Android и iOS приложений, фокусирующийся на проблемах безопасности вне исходного кода, таких как строки ресурсов, сторонние библиотеки и конфигурационные файлы. Требования Требуется Python 3, все необходимые модули можно найти в файле requirements.txt...

CVE-2022-27925

CVE-2022-27925 CVE-2022-27925 nuclei template...

kscan

Kscan - Lightweight Comprehensive Scanner Chinese Readme | English Readme 0 Disclaimer The author did not participate in any XX operation, please stop tracing This tool is intended only for legally authorized enterprise security construction activities and personal learning. If you need to test t...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg — это сканер уязвимостей Java RMI , который можно использовать для обнаружения и проверки распространённых уязвимостей безопасности на конечных точках Java RMI...

fuzzing-templates

Fuzzing Templates 알려지지 않은 보안 취약점을 찾기 위해 nuclei 엔진과 함께 사용하는 커뮤니티 선별 퍼징 템플릿 목록입니다. 문서 • 기여 • 토론 • 커뮤니티 !Caution 이 저장소는 보관 처리되었으며 nuclei-templates 프로젝트의 /dast 디렉터리로 통합되었습니다...

cq

cq Code Query, 범용 코드 보안 스캐닝 도구. CQ는 보안 취약점과 보안 중심 코드 리뷰어에게 관심을 끄는 기타 항목을 코드에서 스캔합니다. 발견된 문제에 대한 참조가 포함된 텍스트 파일을 출력 디렉토리에 생성합니다. 이 출력 파일들은 이후 검토하거나, grep과 같은 unix 명령줄 도구로 필터링하거나, 지정된 file:line 참조에서 코드베이스로 '점프'하는 수단으로 사용할 수 있습니다. 널리 사용되는 방식 중 하나는 출력 파일을 '할 일todo' 목록으로 간주하여, 검토하면서 오탐false positive으로...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Шаблоны Nuclei для сканирования безопасности WordPress 🥳 Прокачайте свою игру в обеспечении безопасности WordPress! В этом проекте — настоящая сокровищница свежих шаблонов Nuclei для WordPress. Сканируйте уязвимости в ядре, плагинах и темах — всё на основе последних...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

nuclei-templates

Nuclei Templates Список шаблонов, подготовленных сообществом, для движка nuclei для поиска уязвимостей в приложениях. Документация • Участие • Обсуждение • Сообщество • Часто задаваемые вопросы • Присоединиться в Discord Шаблоны — это основа , который обеспечивает работу самого механизма...