Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Golang security checker

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Infection Monkey - An open-source adversary emulation platform

Automated Adversary Emulation Platform

Open Source Vulnerability Management Platform

👀👮🐢🔥Performs a privacy & security check of Windows 10

DefectDojo is a DevSecOps and vulnerability management tool.

Automated Security Testing For REST API's

Security automation content in SCAP, Bash, Ansible, and other formats

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

PacBot (Policy as Code Bot)

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.