All projects
Repositories in this selection 21 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Pprojectdiscovery / nucleiA template-based scanner for application and infrastructure vulnerabilities.GoMIT · PermissiveInsufficient rank history32,5413,962——2026-11-02
2—NNVIDIA / SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.PythonApache-2.0 · PermissiveInsufficient rank history23,9752,069——2026-11-02
3—CCISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative sourceInsufficient rank history16,6111,645——2026-09-16
4—Zzaproxy / zaproxyThe ZAP by Checkmarx Core projectJavaApache-2.0 · PermissiveInsufficient rank history16,0942,690——2026-11-02
5—Ffuture-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative sourceInsufficient rank history12,3251,247——2026-11-01
6—Wwpscanteam / wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]RubyNOASSERTION · Restricted / unknownInsufficient rank history9,8301,347——2026-10-27
7—PPyCQA / banditBandit is a tool designed to find common security issues in Python code.PythonApache-2.0 · PermissiveInsufficient rank history8,369871——2026-11-02
8—Jjakejarvis / awesome-shodan-queries🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻UnknownCC0-1.0 · PermissiveInsufficient rank history7,8361,036——2024-05-27
9—Llintsinghua / DeepAuditDeepAudit: Everyone has an AI hacker team that makes vulnerability mining within reach. One-click deployment and operation by Xiaobai, autonomous collaborative audit + automated sandbox PoC verification. Supports Ollama private deployment and generates reports with one click. Support transfer station. Make security no longer expensive and audit no longer complex.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history7,257877——2026-11-01
10—GGhostTroops / scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...GoBSD-3-Clause · PermissiveInsufficient rank history6,190718——2024-07-12
11—Kk8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · PermissiveInsufficient rank history5,340882——2025-03-24
12—Mmicrosoft / ApplicationInspectorA source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.C#MIT · PermissiveInsufficient rank history4,401365——2026-09-15
13—Eevyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningPythonMIT · PermissiveInsufficient rank history4,066500——2026-04-21
14—Sscipag / vulscanAdvanced vulnerability scanning with Nmap NSELuaNOASSERTION · Restricted / unknownInsufficient rank history3,793686——2026-02-06
15—Wwebhintio / hint💡 A hinting engine for the webTypeScriptApache-2.0 · PermissiveInsufficient rank history3,701822——2026-07-21
16—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
17—CCERT-Polska / ArtemisA modular vulnerability scanner with automatic report generation capabilities.PythonBSD-3-Clause · PermissiveInsufficient rank history1,252152——2026-11-03
18—Oolacabs / jackhammerJackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.JavaNOASSERTION · Restricted / unknownInsufficient rank history738161——2024-03-18
19—00xsauby / yasuoA ruby script that scans for vulnerable & exploitable 3rd-party web applications on a networkRubyGPL-3.0 · Share derivative sourceInsufficient rank history572138——2017-12-09
20—Iinsidersec / insiderStatic Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).GoMIT · PermissiveInsufficient rank history55480——2022-04-10
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.