Top Cybersecurity & Privacy tools for vulnerability scanning — made for privacy-conscious users, businesses and security learners. Every project below is a real, public GitHub repository, ranked by the stars the community gave it.
50 repositories · ranked by GitHub stars by default
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending…
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code,…
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation…
The ZAP by Checkmarx Core project
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
Bandit is a tool designed to find common security issues in Python code.
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome…
Automated Αll-in-One OS command injection exploitation tool.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
AI-powered bug bounty hunting toolkit that works with or without subscription.
Ladon大型内网渗透扫描器，PowerShell、Cobalt…
A Security Tool for Bug Bounty, Pentest and Red Teaming.
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json…
A high performance offensive security tool for reconnaissance and vulnerability scanning
Advanced vulnerability scanning with Nmap NSE
EMBA - The firmware security analyzer
💡 A hinting engine for the web
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners…
File upload vulnerability scanner and exploitation tool.
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static…
A powerful browser crawler for web vulnerability scanners
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Semi-automatic OSINT framework and package manager
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for…
:new: The Multi-Tool Web Vulnerability Scanner.
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of…
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
BinAbsInspector: Vulnerability Scanner for Binaries
ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
Application Layer DoS attack simulator
Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.
A tool for BLE environment monitoring. Find and track Bluetooth devices around, create custom filters, get notified when the BLE fingerprint you are looking for is around.
A fast tool to scan CRLF vulnerability written in Go
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
CORS Misconfiguration Scanner
A default credential scanner.
cwe_checker finds vulnerable patterns in binary executables
Simple Golang HTTPS/TLS Examples
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.