GitHub stars · StarDay

1future-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative source12,330

2chaitin / xrayA comprehensive security assessment tool self-developed by Changting, which supports scanning of common web security issues and customized POC | Be sure to read the documentation before using itVueLicense not declaredInactive11,785

3google / osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.devGoApache-2.0 · Permissive11,437

4openai / codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-securityTypeScriptApache-2.0 · Permissive11,319

5lintsinghua / DeepAuditDeepAudit: Everyone has an AI hacker team that makes vulnerability mining within reach. One-click deployment and operation by Xiaobai, autonomous collaborative audit + automated sandbox PoC verification. Supports Ollama private deployment and generates reports with one click. Support transfer station. Make security no longer expensive and audit no longer complex.PythonAGPL-3.0 · Share derivative source7,279

6commixproject / commixAutomated Αll-in-One OS command injection exploitation tool.PythonLicense not declared5,897

7OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,715

8awarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.PythonMIT · Permissive5,644

9zan8in / afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.GoMIT · Permissive4,454

10evyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningPythonMIT · PermissiveInactive4,070

11scipag / vulscanAdvanced vulnerability scanning with Nmap NSELuaLicense not declaredInactive3,794

12e-m-b-a / embaEMBA - The firmware security analyzerShellGPL-3.0 · Share derivative source3,751

13vulnersCom / nmap-vulnersNmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.LuaLicense not declared3,511

14almandin / fuxploiderFile upload vulnerability scanner and exploitation tool.PythonGPL-3.0 · Share derivative sourceInactive3,340

15Qianlitp / crawlergoA powerful browser crawler for web vulnerability scannersGoGPL-3.0 · Share derivative sourceInactive3,045

16CERT-Polska / ArtemisA modular vulnerability scanner with automatic report generation capabilities.PythonBSD-3-Clause · Permissive1,259

17potato-security / PotatoToolThis tool is a powerful comprehensive network security tool designed to provide comprehensive network security solutions for security practitioners, red and blue countermeasures personnel and network security enthusiasts. It integrates a variety of practical functions, including decryption, analysis, scanning, source tracing, etc., providing users with a convenient operation interface and rich function choices. This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.JavaApache-2.0 · Permissive1,237

18ASCIT31 / Dark-MoonOpen-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.PythonGPL-3.0 · Share derivative source1,207

19olacabs / jackhammerJackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.JavaLicense not declaredInactive738