Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• Updated Oct 24, 2025
• Go

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• Updated Oct 23, 2025
• Shell

The ZAP by Checkmarx Core project

• Updated Oct 23, 2025
• Java

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• Updated Oct 20, 2025
• Go

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

• Updated Sep 29, 2025
• Ruby

Bandit is a tool designed to find common security issues in Python code.

• Updated Oct 20, 2025
• Python

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

• Updated May 27, 2024

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

• Updated Jul 12, 2024
• Go

Ladon大型内网渗透扫描器,PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell,支持批量A段/B段/C段以及跨网段扫描,支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等,大量高危漏洞检测模块MS17010、Zimbra、Exchange

• Updated Mar 24, 2025
• C#

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

• Updated Oct 21, 2025
• C#

Official Black Hat Arsenal Security Tools Repository

• Updated Aug 26, 2024

💡 A hinting engine for the web

• Updated Nov 1, 2024
• TypeScript

Advanced vulnerability scanning with Nmap NSE

• Updated Sep 11, 2024
• Lua

A high performance offensive security tool for reconnaissance and vulnerability scanning

• Updated Jun 10, 2025
• Python

Source Code Security Audit (源代码安全审计)

• Updated Sep 16, 2022
• Python

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

• Updated Oct 9, 2025
• Go

nodejsscan is a static security code scanner for Node.js applications.

• Updated Oct 10, 2025
• CSS

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• Updated Oct 23, 2025
• Go

Semi-automatic OSINT framework and package manager

• Updated Jan 31, 2025
• Rust

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

• Updated Dec 11, 2022
• Python