Top #security-tools Tools & Software

shannon

github

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

web-check

github

🕵️‍♂️ All-in-one OSINT tool for analysing any website

trufflehog

github

Find, verify, and analyze leaked credentials

fscan

github

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

gosec

github

Go security checker

certificates

github

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

bandit

github

Bandit is a tool designed to find common security issues in Python code.

brakeman

github

A static analysis security vulnerability scanner for Ruby on Rails applications

syzkaller

github

syzkaller is an unsupervised coverage-guided kernel fuzzer

AutoSploit

github

Automated Mass Exploiter

Android-PIN-Bruteforce

github

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

securityonion

github

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

zizmor

github

Static analysis for GitHub Actions

pocsuite3

github

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

Pentest-Windows

github

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

Ethical-Hacking-Labs

github

Practical Ethical Hacking Labs 🗡🛡

dockle

github

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

chipsec

github

Platform Security Assessment Framework

ContainerSSH

github

ContainerSSH: Launch containers on demand

GScan

github

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

bundler-audit

github

Patch-level verification for Bundler

osv.dev

github

Open source vulnerability DB and triage service.

kics

github

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

ProxyCat

github

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用