GitHub stars · StarDay

1anchore / grypeA vulnerability scanner for container images and filesystemsGoApache-2.0 · Permissive13,194

2google / oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.ShellApache-2.0 · Permissive12,925

3future-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative source12,330

4edoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · Permissive11,475

5quay / clairVulnerability Static Analysis for ContainersGoApache-2.0 · Permissive11,087

6six2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · Permissive8,338

7trickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · Permissive8,190

8infoslack / awesome-web-hackingA list of web application securityMIT · Permissive7,346

9presidentbeef / brakemanA static analysis security vulnerability scanner for Ruby on Rails applicationsRubyLicense not declared7,293

10snyk / cliSnyk CLI scans and monitors your projects for security vulnerabilities.TypeScriptLicense not declared5,697

11google / clusterfuzzScalable fuzzing infrastructure.PythonApache-2.0 · Permissive5,631

12aquasecurity / kube-hunterHunt for security weaknesses in Kubernetes clustersPythonApache-2.0 · Permissive5,090

13cdk-team / CDK📦 Make security testing of K8s, Docker, and Containerd easier.GoApache-2.0 · Permissive4,784

14DependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · Permissive4,419

15RetireJS / retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.JavaScriptApache-2.0 · Permissive4,203

16antonio-morales / Fuzzing101An step by step fuzzing tutorial. A GitHub Security Lab initiativeApache-2.0 · Permissive3,929

17zhzyker / vulmapVulmap is a web vulnerability scanning and verification tool that can scan web apps for vulnerabilities and perform vulnerability verification.PythonGPL-3.0 · Share derivative source3,512

18Bearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoLicense not declared2,785

19OWASP / NodeGoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.HTMLApache-2.0 · Permissive2,085

20lirantal / is-website-vulnerablefinds publicly known security vulnerabilities in a website's frontend JavaScript librariesJavaScriptApache-2.0 · Permissive2,041