Vulnerability scanning
Tools that look for known vulnerabilities and misconfigurations
1–100 of 401
ImpactToolCategoryStarsUpdated
Local onlyGitleaksgitleaks/gitleaksA command-line tool that finds passwords, API keys, and tokens that have slipped into Git repositories and files.Vulnerability scanningstars30,3152026-10-23Local onlyMobSFMobSF/Mobile-Security-Framework-MobSFA mobile app security tool that analyzes Android and iOS apps and lists risky permissions, settings, and code issues. You use it from a web browser.Reverse engineering / Vulnerability scanningstars22,0322026-10-25Can harm othersNucleiprojectdiscovery/nucleiA command-line scanner that sends requests following steps written in YAML templates and checks the responses for known vulnerabilities and misconfigurations.Vulnerability scanning / Web securitystars32,3012026-10-25Local onlyOSV-Scannergoogle/osv-scannerA command-line tool from Google that reads your project's dependencies and checks them against the OSV.dev vulnerability database.Vulnerability scanningstars11,2642026-10-24Local onlyTrivyaquasecurity/trivyA scanner that finds vulnerabilities, misconfigurations, and embedded secrets in container images, code, and Kubernetes.Vulnerability scanning / Containers and cloudstars38,7032026-10-23Reaches othersTruffleHogtrufflesecurity/trufflehogA scanner that finds leaked API keys and passwords in Git history, files, cloud storage, and more. It can also check whether a key it finds still works.Vulnerability scanning / AppSec and DevSecOpsstars28,6982026-10-24Reaches othersVulsfuture-architect/vulsAn agentless vulnerability scanner that checks the packages installed on a server and lists the ones affected by known CVEs.Vulnerability scanningstars12,3022026-10-21Local onlyWazuhwazuh/wazuhA free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.Vulnerability scanning / Forensicsstars17,4102026-10-24Can harm othersZAPzaproxy/zaproxyA free web app scanner that sits between your browser and a web app, records the traffic, and looks for vulnerabilities. Formerly OWASP ZAP, now ZAP by Checkmarx.Web security / Vulnerability scanningstars16,0252026-10-23Not ratedshannonkeygraphhq/shannonReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars49,2902026-10-15Not ratedh4ckerthe-art-of-hacking/h4ckerReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Learning and practice labsstars29,8932026-10-23Not ratedswe-agentswe-agent/swe-agentReview coming soon (opens GitHub in a new tab)AppSec and DevSecOps / Vulnerability scanningstars20,6302026-10-19Not ratedlyniscisofy/lynisReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Defense and hardening / Web securitystars16,5412026-09-16Not ratedopaopen-policy-agent/opaReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars12,3972026-10-24Not ratedcodex-securityopenai/codex-securityReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars11,1882026-10-24Not ratedgaraknvidia/garakReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars9,6792026-10-23Not ratedcheckovbridgecrewio/checkovReview coming soon (opens GitHub in a new tab)Containers and cloud / Vulnerability scanningstars9,0982026-10-22Not ratedtsunami-security-scannergoogle/tsunami-security-scannerReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars8,6182026-10-06Not ratedgixyyandex/gixyReview coming soon (opens GitHub in a new tab)Vulnerability scanning / AppSec and DevSecOpsstars8,5622024-07-28Not ratedkyvernokyverno/kyvernoReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloudstars8,2752026-10-23Not ratedkube-benchaquasecurity/kube-benchReview coming soon (opens GitHub in a new tab)Containers and cloud / Vulnerability scanningstars8,2372026-10-19Not ratedairgeddonv1s1t0r1sh3r3/airgeddonReview coming soon (opens GitHub in a new tab)Network / Vulnerability scanningstars8,0862026-10-21Not ratedexploitdboffensive-security/exploitdbReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars7,8572022-11-10Not rateddependencycheckdependency-check/dependencycheckReview coming soon (opens GitHub in a new tab)AppSec and DevSecOps / Vulnerability scanningstars7,7382026-10-22Not rateddefending-code-reference-harnessanthropics/defending-code-reference-harnessReview coming soon (opens GitHub in a new tab)AppSec and DevSecOps / Vulnerability scanningstars7,6312026-08-06Not ratedpenetration_testing_pocmr-xn/penetration_testing_pocReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanning / Red teaming and C2stars7,5292026-10-24Not ratedbrakemanpresidentbeef/brakemanReview coming soon (opens GitHub in a new tab)Vulnerability scanning / AppSec and DevSecOpsstars7,2852026-10-22Not ratedtfsecaquasecurity/tfsecReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanning / Containers and cloudstars7,0582026-03-25Not ratedfleetfleetdm/fleetReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Defense and hardeningstars7,0392026-10-24Not ratedfaradayinfobyte/faradayReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars6,8172026-10-21Not ratedlinux-exploit-suggesterthe-z-labs/linux-exploit-suggesterReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars6,6442026-10-20Not ratedcloudquerycloudquery/cloudqueryReview coming soon (opens GitHub in a new tab)Containers and cloud / Vulnerability scanningstars6,5432026-10-24Not ratedagent-governance-toolkitmicrosoft/agent-governance-toolkitReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars6,4592026-10-23Not ratedcloud-custodiancloud-custodian/cloud-custodianReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloudstars6,0932026-10-22Not ratednettackerowasp/nettackerReview coming soon (opens GitHub in a new tab)Reconnaissance / Web security / Vulnerability scanningstars5,6872026-10-23Not ratedthreatmapperdeepfence/threatmapperReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloudstars5,3262026-06-01Not ratedawesome-pocthreekiii/awesome-pocReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars5,2242026-05-11Not rateddjango-defectdojodefectdojo/django-defectdojoReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloud / Incident responsestars5,0932026-10-24Not ratedossec-hidsossec/ossec-hidsReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Networkstars5,0672026-10-23Not ratedwesngbitsadmin/wesngReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars4,9642026-10-20Not ratedopenvas-scannergreenbone/openvas-scannerReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Web securitystars4,8852026-10-21Not ratedgda-android-reversing-toolcharles2gan/gda-android-reversing-toolReview coming soon (opens GitHub in a new tab)Reverse engineering / Vulnerability scanning / Malware analysisstars4,8692026-04-10Not ratedharden-windows-securityhotcakex/harden-windows-securityReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars4,8092026-10-23Not ratedairgorahmartin-olivier/airgorahReview coming soon (opens GitHub in a new tab)Network / Vulnerability scanningstars4,7452026-10-21Not ratedblueteam-toolsa-poc/blueteam-toolsReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Malware analysis / Learning and practice labsstars4,5382026-08-23Not ratedciso-assistant-communityintuitem/ciso-assistant-communityReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars4,5352026-10-24Not rateddependency-trackdependencytrack/dependency-trackReview coming soon (opens GitHub in a new tab)AppSec and DevSecOps / Vulnerability scanningstars4,3352026-10-23Not ratedexphubzhzyker/exphubReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars4,2912021-04-04Not ratedwindows-exploit-suggesterstrozfriedberg/windows-exploit-suggesterReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars4,2262023-05-11Not ratedmalwoverviewalexandreborges/malwoverviewReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Incident response / Malware analysisstars4,1352026-09-22Not ratedpeiqi-wiki-bookpeiqi0/peiqi-wiki-bookReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars4,1222023-11-08Not ratedcopy-fail-cve-2026-31431theori-io/copy-fail-cve-2026-31431Review coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars4,0822026-04-29Not ratedraccoonevyatarmeged/raccoonReview coming soon (opens GitHub in a new tab)Web security / Reconnaissance / Vulnerability scanningstars4,0572026-04-21Not ratedspectre-meltdown-checkerspeed47/spectre-meltdown-checkerReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars3,9572026-09-26Not ratedpocsuite3knownsec/pocsuite3Review coming soon (opens GitHub in a new tab)Vulnerability scanning / Exploits and PoCsstars3,8772025-02-28Not ratedvulscanscipag/vulscanReview coming soon (opens GitHub in a new tab)Web security / Network / Vulnerability scanningstars3,7922026-02-06Not ratedcloudsploitaquasecurity/cloudsploitReview coming soon (opens GitHub in a new tab)Containers and cloud / Vulnerability scanningstars3,7822026-09-22Not ratedsilentsnifferahmadhassan-bted/silentsnifferReview coming soon (opens GitHub in a new tab)Reconnaissance / Vulnerability scanningstars3,7192026-10-22Not ratedxunfengysrc/xunfengReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars3,5932024-04-16Not ratedkrackattacks-scriptsvanhoefm/krackattacks-scriptsReview coming soon (opens GitHub in a new tab)Network / Vulnerability scanningstars3,5382024-12-25Not ratedvulmapzhzyker/vulmapReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars3,5162023-04-26Not ratednmap-vulnersvulnerscom/nmap-vulnersReview coming soon (opens GitHub in a new tab)Web security / Network / Vulnerability scanningstars3,5092026-09-28Not ratedlog4j-scanfullhunt/log4j-scanReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars3,4252022-11-23Not ratednosqlmapcodingo/nosqlmapReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars3,3642026-10-13Not rateddocklegoodwithtech/dockleReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloudstars3,3002026-08-10Not ratedgithub-dorkstechgaun/github-dorksReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars3,3002026-09-15Not ratedcvelistv5cveproject/cvelistv5Review coming soon (opens GitHub in a new tab)Vulnerability scanningstars3,1092026-10-24Not ratedosv.devgoogle/osv.devReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars3,0012026-10-23Not ratedpingcastlenetwrix/pingcastleReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars2,9832026-10-13Not ratedpwndocpwndoc/pwndocReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,9142026-10-02Not ratedopencveopencve/opencveReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,8902026-10-14Not ratedcontentcomplianceascode/contentReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Defense and hardeningstars2,8282026-10-24Not ratedbearerbearer/bearerReview coming soon (opens GitHub in a new tab)AppSec and DevSecOps / Vulnerability scanning / Web securitystars2,7722026-10-22Not ratedscubagearcisagov/scubagearReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Containers and cloudstars2,7362026-10-23Not ratedvulnxprojectdiscovery/vulnxReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,6962026-10-23Not ratedwindows_hardening0x6d69636b/windows_hardeningReview coming soon (opens GitHub in a new tab)Defense and hardening / Vulnerability scanningstars2,6712026-10-23Not ratedcve-searchcve-search/cve-searchReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,6622026-10-13Not ratedsysreptorsyslifters/sysreptorReview coming soon (opens GitHub in a new tab)Vulnerability scanning / Learning and practice labsstars2,6052026-10-22Not ratedsn0intkpcyrd/sn0intReview coming soon (opens GitHub in a new tab)Reconnaissance / Web security / Vulnerability scanningstars2,5572026-09-20Not ratedbrutesprayx90skysn3k/brutesprayReview coming soon (opens GitHub in a new tab)Network / Vulnerability scanningstars2,5512026-10-23Not ratedadvisory-databasegithub/advisory-databaseReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,5202026-10-24Not ratedsudo_killerth3xace/sudo_killerReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanning / Learning and practice labsstars2,4922026-03-11Not rateddiamorphinem0nad/diamorphineReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,4832026-04-27Not ratedarcherysecarcherysec/archerysecReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,4782025-06-11Not ratedmasvsowasp/masvsReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,4682026-09-21Not ratedcve-2024-1086notselwyn/cve-2024-1086Review coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars2,4572024-04-17Not ratedreact2shell-scannerassetnote/react2shell-scannerReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,4552025-12-07Not ratednfcgatenfcgate/nfcgateReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,4332026-07-20Not ratedingramjorhelp/ingramReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars2,4012026-10-12Not ratedheartbleedfilosottile/heartbleedReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,3722021-02-24Not ratedpoc-bombertr0uble-maker/poc-bomberReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars2,3692023-06-09Not ratedspringboot-scanaabysszg/springboot-scanReview coming soon (opens GitHub in a new tab)Exploits and PoCs / Vulnerability scanningstars2,3532025-11-09Not ratedlinux-kernel-defence-mapa13xp0p0v/linux-kernel-defence-mapReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars2,3272026-10-11Not ratedweblogicscanrabbitmask/weblogicscanReview coming soon (opens GitHub in a new tab)Vulnerability scanningstars2,2602023-05-22Not ratedmedusaascotbe/medusaReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanning / Exploits and PoCsstars2,2382024-03-03Not ratedkernel-hardening-checkera13xp0p0v/kernel-hardening-checkerReview coming soon (opens GitHub in a new tab)Defense and hardening / Vulnerability scanningstars2,1532026-09-19Not ratedvulnxanouarbensaad/vulnxReview coming soon (opens GitHub in a new tab)Reconnaissance / Vulnerability scanningstars2,1522023-06-07Not ratedrapidscanskavngr/rapidscanReview coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars2,1422023-08-22Not ratedlearn365harsh-bothra/learn365Review coming soon (opens GitHub in a new tab)Web security / Vulnerability scanningstars1,9952022-06-20Not ratedlinux-exploit-suggester-2jondonas/linux-exploit-suggester-2Review coming soon (opens GitHub in a new tab)Vulnerability scanningstars1,9732023-01-28