English | 简体中文
Scanners Box also known as scanbox, is a powerful hacker toolkit, which has collected more than 10 categories of open source scanners from Github, including subdomain, database, middleware and other modular design scanner etc. But for other Well-known scanning tools, such as nmap, w3af, brakeman, arachni, nikto, metasploit, aircrack-ng will not be included in the scope of collection.
- Subdomain Enumeration or Takeover
- Database SQL Injection Vulnerability or Brute Force
- Weak Usernames or Passwords Enumeration For Web
- Authorization Brute Force or Vulnerability Scan For IoT
- Mutiple types of Cross-site scripting Detection
- Enterprise Assets Management or Data Protection
- Malicious Scripts or Binary Malware Detection
- Intranet Penetration
- Vulnerability Assessment for Middleware or Information Leak Scan
- Special Components or Vulnerability Categories Scan
- Vulnerability Assessment for Wireless Network
- Local Area Network detection
- Dynamic or Static Code Analysis
- Modular Design Scanners or Vulnerability Detecting Framework
- Advanced Persistent Threat
- https://github.com/lijiejie/subDomainsBrute - A classical subdomain enumeration Tool by lijiejie
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/ring04h/wydomain - A Speed and Precision subdomain enumeration Tool by ringzero
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/le4f/dnsmaper - Subdomain enumeration tool with map record
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/0xbug/orangescan - Online subdomain enumeration tool
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/TheRook/subbrute - A DNS meta-query spider that enumerates DNS records, and subdomains,supported API
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/We5ter/GSDF - Subdomain enumeration via Google certificate transparency
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/mandatoryprogrammer/cloudflare_enum - Subdomain enumeration via CloudFlare
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/guelfoweb/knock - Knock subdomain scan
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/exp-db/PythonPool/tree/master/Tools/DomainSeeker - An intergratd Python subdomain enumeration tool
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/code-scan/BroDomain - Find brother domain
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/chuhades/dnsbrute - A fast domain brute tool
Rating: 🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✖️
- https://github.com/yanxiu0614/subdomain3 - A simple and fast tool for bruting subdomains
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/michenriksen/aquatone - A powerful subdomain tool and domain takeovers finding tools
Rating: 🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/evilsocket/dnssearch - A subdomain enumeration tool
Rating: 🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✖️
- https://github.com/reconned/domained - Subdomain enumeration tools for bug hunting
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/bit4woo/Teemo - A domain name & Email address collection tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/laramies/theHarvester - E-mail, subdomain and people names harvester
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/nmalcolm/Inventus - A spider designed to find subdomains of a specific domain by crawling it
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✖️
- https://github.com/aboul3la/Sublist3r - Fast subdomains enumeration tool for penetration testers
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/jonluca/Anubis - Subdomain enumeration and information gathering tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/n4xh4ck5/N4xD0rk - Listing subdomains about a main domain
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/infosec-au/altdns - Subdomain discovery through alterations and permutations
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/FeeiCN/ESD - Enumeration sub domains tool,based on AsyncIO and non-repeating dict
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/UnaPibaGeek/ctfr - Abusing certificate transparency logs for getting HTTPS websites subdomains
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/giovanifss/Dumb - Dumain Bruteforcer, a fast and flexible domain bruteforcer
Rating: 🌟🌟🌟🌟 | Language: Haskell | Ongoing[last 6 months]: ✖️
- https://github.com/caffix/amass - Subdomain enumeration in Go
Rating: 🌟🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/Ice3man543/subfinder - A subdomain discovery tool which has a simple modular architecture and has been aimed as a successor to sublist3r project
Rating: 🌟🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/Ice3man543/SubOver - A powerful subdomain takeover tool
Rating: 🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/janniskirschner/horn3t - Powerful Visual Subdomain Enumeration
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/0xbug/SQLiScanner - A SQLi vulnerability scanner via SQLMAP and Charles
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/stamparm/DSSS - A SQLi vulnerability scanner with 99 lines of code
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/youngyangyang04/NoSQLAttack - A SQLi vulnerability scanner for mongoDB
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Neohapsis/bbqsql - A blind SQLi vulnerability scanner
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/NetSPI/PowerUpSQL - A SQLi vulnerability scanner with Powershell script
Rating: 🌟🌟🌟🌟 | Language: Powershell | Ongoing[last 6 months]: ✔️
- https://github.com/WhitewidowScanner/whitewidow - Another SQL vulnerability scanner
Rating: 🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✖️
- https://github.com/stampery/mongoaudit - A powerful MongoDB auditing and pentesting tool
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/torque59/Nosql-Exploitation-Framework - A Python framework For NoSQL scanning and exploitation
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/missDronio/blindy - Simple script to automate brutforcing blind sql injection vulnerabilities
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/fengxuangit/Fox-scan - A initiative and passive SQL injection vulnerable test tools
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/JohnTroony/Blisqy - Exploit time-based blind-SQL injection in HTTP-Headers
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/ron190/jsql-injection - A lightweight application used to find database information from a distant server
Rating: 🌟🌟🌟 | Language: Java | Ongoing[last 6 months]: ✖️
- https://github.com/Hadesy2k/sqliv - Massive SQL injection vulnerability scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/s0md3v/sqlmate - A friend of SQLmap which will do what you always expected from SQLmap
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/m8r0wn/enumdb - MySQL and MSSQL brute force and post exploitation tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/lijiejie/htpwdScan - A python HTTP weak pass scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/netxfly/crack_ssh - SSH, Redis, mongoDB weak password bruteforcer
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/shengqi158/weak_password_detect - A python HTTP weak password scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/s0md3v/Blazy - a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/MooseDojo/myBFF - Web application brute force framework,supports Citrix Gateway,CiscoVPN and so on
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/rapid7/IoTSeeker - Weak-password IoT devices scanner
Rating: 🌟🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✖️
- https://github.com/shodan-labs/iotdb - IoT Devices scanner via nmap
Rating: 🌟🌟🌟 | Language: XML | Ongoing[last 6 months]: ✖️
- https://github.com/googleinurl/RouterHunterBR - Testing vulnerabilities in devices and routers connected to the Internet
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/scu-igroup/telnet-scanner - Weak telnet password scanner based on password enumeration
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/viraintel/OWASP-Nettacker - Network information gathering vulnerability scanner,most useful to scan IoT
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/threat9/routersploit - Exploitation Framework for embedded Devices,such as router
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/w3h/icsmaster/tree/master/nse - Digital bond's ICS enumeration tools
Rating: 🌟🌟🌟 | Language: NSE | Ongoing[last 6 months]: ✖️
- https://github.com/0x584A/fuzzXssPHP - A very simple reflected XSS scanner supports GET/POST
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/chuhades/xss_scan - Reflected XSS scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/BlackHole1/autoFindXssAndCsrf - A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities
Rating: 🌟🌟 | Language: Javascript | Ongoing[last 6 months]: ✖️
- https://github.com/shogunlab/shuriken - XSS command line tool for testing lists of XSS payloads on web apps
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/s0md3v/XSStrike - Fuzz and bruteforce parameters for XSS, WAFs detect and bypass
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/stamparm/DSXS - A fully functional cross-site scripting vulnerability scanner,supporting GET and POST parameters,and written in under 100 lines of code
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/ysrc/xunfeng - Vulnerability rapid response,scanning system for intranet
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/x0day/Multisearch-v2 - Enterprise assets collector based on search engine
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Ekultek/Zeus-Scanner - An advanced dork searching tool that is capable of finding IP address /URL blocked by search engine,and can run sqlmap and nmap scans on the URL's
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/0xbug/Biu-framework - Security scan framework For enterprise intranet based services
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/metac0rtex/GitHarvester - Used for harvesting information from GitHub
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/repoog/GitPrey - Searching sensitive files and contents in GitHub
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/0xbug/Hawkeye - Github leak scan for enterprise
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/UnkL4b/GitMiner - Advanced search tool and automation in Github
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/dxa4481/truffleHog - Searches high entropy strings through git repositories
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/1N3/Goohak - Automatically launch Google hacking queries against a target domain
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/UKHomeOffice/repo-security-scanner - CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
Rating: 🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✖️
- https://github.com/FeeiCN/GSIL - Github sensitive information leakage scan
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/MiSecurity/x-patrol - Github leaked patrol
Rating: 🌟🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/anshumanbh/git-all-secrets - A tool to capture all the git secrets by leveraging multiple open source git searching tools
Rating: 🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/VKSRC/Github-Monitor - Github sensitive information leakage monitor by vipkid SRC
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/he1m4n6a/findWebshell -Simple webshell detector
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Tencent/HaboMalHunter -Used for automated malware analysis and security assessment on the Linux system
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/PlagueScanner/PlagueScanner - Open source multiple AV scanner framework
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/nbs-system/php-malware-finder - An awesome tool to detect potentially malicious PHP files
Rating: 🌟🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✔️
- https://github.com/emposha/PHP-Shell-Detector - Helps you find and identify PHP/Perl/Asp/Aspx shells
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/erevus-cn/scan_webshell - Simple webshell detector
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/emposha/Shell-Detector - A application that helps you find and identify PHP/Perl/Asp/Aspx shells
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/m4rco-/dorothy2 - A malware/botnet analysis framework written in Ruby
Rating: 🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✖️
- https://github.com/droidefense/engine - Advance Android malware analysis framework
Rating: 🌟🌟🌟🌟🌟 | Language: Java | Ongoing[last 6 months]: ✔️
- https://github.com/lcatro/network_backdoor_scanner - An internal network scanner like meterpreter
Rating: 🌟🌟🌟 | Language: C++ | Ongoing[last 6 months]: ✖️
- https://github.com/fdiskyou/hunter - User hunter using WinAPI calls only
Rating: 🌟🌟 | Language: C++ | Ongoing[last 6 months]: ✖️
- https://github.com/BlackHole1/WebRtcXSS - Use XSS automation invade intranet
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/ring04h/wyportmap - Target port scanning + system service fingerprint recognition
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/ring04h/weakfilescan - Dynamic multi - thread sensitive information leak detection tool
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/EnableSecurity/wafw00f - Identify and fingerprint Web Application Firewall
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/rbsec/sslscan - Tests SSL/TLS enabled services to discover supported cipher suites
Rating: 🌟🌟🌟🌟 | Language: C | Ongoing[last 6 months]: ✔️
- https://github.com/urbanadventurer/whatweb - Website fingerprinter
Rating: 🌟🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✔️
- https://github.com/tanjiti/FingerPrint - Another website fingerprinter
Rating: 🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✖️
- https://github.com/nanshihui/Scan-T - A new spider based on Python with more function including Network fingerprint search
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/OffensivePython/Nscan - Fast internet-wide scanner
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/ywolf/F-NAScan - Scanning a network asset information script
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/maurosoria/dirsearch - Web path scanner
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/x0day/bannerscan - C-segment Banner with path scanner
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/RASSec/RASscan - Internal network port speed scanners
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/3xp10it/bypass_waf - Automatic WAF Bypass Fuzzing Tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/3xp10it/xcdn - Try to find out the actual ip behind cdn
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/Xyntax/BingC - Based on the Bing search engine C / side-stop query, multi-threaded, supported API
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Xyntax/DirBrute - Multi-thread web directory enumerating tool
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/zer0h/httpscan - A HTTP service detector with a crawler from IP/CIDR
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/lietdai/doom - Distributed task distribution of the IP port vulnerability scanner based on thorn
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/chichou/grab.js - Fast TCP banner grabbing like zgrab, but supports much more protocol
Rating: 🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✖️
- https://github.com/Nitr4x/whichCDN - Detect if a given website is protected by a CDN
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/secfree/bcrpscan - Base on crawler result web path scanner
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/mozilla/ssh_scan - A prototype SSH configuration and policy scanner
Rating: 🌟🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✔️
- https://github.com/18F/domain-scan - Scans domains for data on their HTTPS configuration and assorted other things
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/ggusoft/inforfinder - A tool made to collect information of any domain pointing at a server and fingerprinter
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/boy-hack/gwhatweb - Fingerprinter for CMS
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Mosuan/FileScan - Sensitive files scanner
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Xyntax/FileSensor - Dynamic file detection tool based on crawler
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/deibit/cansina - Web content discovery tool
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/mozilla/cipherscan - A very simple way to find out which SSL ciphersuites are supported by a target
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/Bash Shell | Ongoing[last 6 months]: ✔️
- https://github.com/xmendez/wfuzz - Web application framework and web content scanner
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/s0md3v/Breacher - An advanced multithreaded admin panel finder written in Python
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/ztgrace/changeme - A default credential scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/medbenali/CyberScan - An open source penetration testing tool that can analyse packets,decoding,scanning ports, pinging and geolocation of an IP
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/m0nad/HellRaiser - HellRaiser scan with nmap then correlates cpe's found with cve-search to enumerate vulnerabilities
Rating: 🌟🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✖️
- https://github.com/scipag/vulscan - Advanced vulnerability scanning with Nmap NSE
Rating: 🌟🌟 | Language: NSE | Ongoing[last 6 months]: ✖️
- https://github.com/jekyc/wig - WebApp information gatherer
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/eldraco/domain_analyzer - Analyze the security of any domain by finding all the information possible
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/cloudtracer/paskto - Passive directory scanner and web crawler based on Nikto DB
Rating: 🌟🌟🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✔️
- https://github.com/zerokeeper/WebEye - A web service and WAF fingerprinter
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]:
- https://github.com/m3liot/shcheck - Just check security headers on a target website
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/aipengjie/sensitivefilescan - A speed and awesome sensitive files scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/fnk0c/cangibrina - A fast and powerfull dashboard (admin) finder
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/n4xh4ck5/CMSsc4n - Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Ekultek/WhatWaf - Detect and bypass web application firewalls and protection systems
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/dzonerzy/goWAPT - Go web application penetration test and web application fuzz tool
Rating: 🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✖️
- https://github.com/blackye/webdirdig - Sensitive files scanner
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/GitHackTools/BillCipher - Information gathering tool for a website or IP address
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/boy-hack/w8fuckcdn - Get the website real IP address by scanning the entire net
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/boy-hack/w11scan - Distributed web fingerprint identification platform
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Nekmo/dirhunt - Find web directories without bruteforce
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/MetaChar/pyHAWK - Searches the directory of choice for interesting files. Such as database files and files with passwords stored on them
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/H4ckForJob/dirmap - An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/s0md3v/Photon - **Incredibly fast crawler which extracts urls, emails, files, website accounts and much more
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/1N3/BlackWidow - Gather OSINT and fuzz for OWASP vulnerabilities on a target website
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/1N3/XSSTracer - A small python script to check for cross-Site tracing, Clickjacking etc
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/shengqi158/svnhack - A
.svnfolder disclosure exploit
Rating: 🌟🌟🌟 | Language: NSE | Ongoing[last 6 months]: ✖️
- https://github.com/lijiejie/GitHack - A
.gitfolder disclosure exploit
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/blackye/Jenkins - Jenkins vulnerability detection, user grab enumerating
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/code-scan/dzscan - discuz scanner
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/chuhades/CMS-Exploit-Framework -CMS exploit framework
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/lijiejie/IIS_shortname_Scanner - An IIS shortname scanner
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/riusksk/FlashScanner - Flash XSS scanner
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/epinna/tplmap - Automatic Server-Side Template Injection detection and exploitation tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/cr0hn/dockerscan - Docker security analysis & hacking tools
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/m4ll0k/WPSeku - Simple Wordpress security scanner
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/rastating/wordpress-exploit-framework - Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems
Rating: 🌟🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✔️
- https://github.com/ilmila/J2EEScan - A plugin for Burp Suite proxy to improve the test coverage during web application penetration tests on J2EE applications
Rating: 🌟🌟 | Language: Java | Ongoing[last 6 months]: ✖️
- https://github.com/riusksk/StrutScan - Struts2 vuls scanner base Perl script
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/D35m0nd142/LFISuite - Totally automatic LFI exploiterand scanner supports reverse shell
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/0x4D31/salt-scanner - Linux vulnerability scanner based on Salt Open and vulners audit API, with Slack notifications and JIRA integration
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/tijme/angularjs-csti-scanner - Automated client-side template injection detection for AngularJS
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/irsdl/IIS-ShortName-Scanner - Scanners for IIS short filename 8.3 disclosure vulnerability
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/swisskyrepo/Wordpresscan - WPScan rewritten in Python + some WPSeku ideas
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/CHYbeta/cmsPoc - CMS exploit framework
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/3gstudent/Smbtouch-Scanner - Automatically scan the inner network to detect whether they are vulnerable
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/OsandaMalith/LFiFreak - A unique automated LFI exploiter with bind/reverse shells
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/mak-/parameth - This tool can be used to brute discover GET and POST parameters
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Lucifer1993/struts-scan - Struts2 vuls scanner,supported all vuls
Rating: 🌟🌟🌟🌟🌟 | Language: C#/Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/hahwul/a2sv - Auto scanning to SSL vulnerability, such as heartbleed etc
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/NickstaDB/BaRMIe - Java RMI enumeration and attack tool
Rating: 🌟🌟🌟 | Language: Java | Ongoing[last 6 months]: ✖️
- https://github.com/RetireJS/grunt-retire - Scanner detecting the use of Javascript libraries with known vulnerabilities
Rating: 🌟🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✔️
- https://github.com/kotobukki/BDA - The vulnerability detector for Hadoop and Spark
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/jagracey/Regex-DoS - RegEx Denial of service scanner for Node.js package
Rating: 🌟🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✖️
- https://github.com/milesrichardson/docker-onion-nmap - Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq
Rating: 🌟🌟🌟🌟 | Language: Bash Shell | Ongoing[last 6 months]: ✖️
- https://github.com/Moham3dRiahi/XAttacker - Web CMS exploit framework
Rating: 🌟🌟🌟🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✖️
- https://github.com/lijiejie/BBScan - A tiny batch web vulnerability scanner
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/almandin/fuxploider - File upload vulnerability scanner and exploitation tool
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/Jamalc0m/wphunter - A Wordpress vulnerability scanner
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/retirejs/retire.js - A scanner detecting the use of Javascript libraries with known vulnerabilities
Rating: 🌟🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✔️
- https://github.com/3xp10it/xupload - A tool for automatically testing whether the upload function can upload webshell
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/mobrine-mob/M0B-tool - Auto detect CMS and exploit
Rating: 🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✖️
- https://github.com/rezasp/vbscan - OWASP VBScan is a Black Box vBulletin vulnerability scanner
Rating: 🌟🌟🌟🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✔️
- https://github.com/MrSqar-Ye/BadMod - Detect websites CMS & auto exploit
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]:
- https://github.com/Tuhinshubhra/CMSeeK - CMS detection and exploitation suite
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/cloudsploit/scans - AWS security scanning checks
Rating: 🌟🌟🌟🌟 | Language: Node.js | Ongoing[last 6 months]: ✔️
- https://github.com/radenvodka/SVScanner - Scanner vulnerability and massive exploit for Wordpress,Magento,Joomla and so on
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✔️
- https://github.com/rezasp/joomscan - OWASP Joomla vulnerability scanner project
Rating: 🌟🌟🌟🌟🌟 | Language: Perl | Ongoing[last 6 months]: ✔️
- https://github.com/6IX7ine/djangohunter - Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/vulmon/Vulmap - Local vulnerability scanning programs for Windows and Linux operating systems
Rating: 🌟🌟🌟🌟 | Language: Powershell/Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/seungsoo-lee/DELTA - Sdn security evaluation framework
Rating: 🌟🌟🌟🌟 | Language: Java/Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/thelinuxchoice/facebash - Facebook Brute Forcer in shellscript using TOR
Rating: 🌟🌟🌟🌟 | Language: Bash Shell | Ongoing[last 6 months]: ✔️
- https://github.com/savio-code/fern-wifi-cracker - Testing and discovering flaws in ones own network
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/P0cL4bs/WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/MisterBianco/BoopSuite - A Suite of Tools written in Python for wireless auditing and security testing
Rating: 🌟🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/besimaltnok/PiFinger - Searches for wifi-pineapple traces and calculate wireless network security score
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/derv82/wifite2 - A complete re-write of Wifite,Automated Wireless Attack Tool
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/m4n3dw0lf/PytheM - Multi-purpose network pentest framework
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/sowish/LNScan - Local Network Scanner based on BBScan via.lijiejie
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/niloofarkheirkhah/nili - Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/SkyLined/LocalNetworkScanner - PoC Javascript that scans your local network when you open a webpage
Rating: 🌟🌟🌟 | Language: Javascript | Ongoing[last 6 months]: ✖️
- https://github.com/wufeifei/cobra - A static code analysis system that automates the detecting vulnerabilities and security issue
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/OneSourceCat/phpvulhunter - A tool that can scan php vulnerabilities automatically using static analysis methods
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/Qihoo360/phptrace - A tracing and troubleshooting tool for PHP scripts
Rating: 🌟🌟🌟🌟 | Language: C | Ongoing[last 6 months]: ✖️
- https://github.com/ajinabraham/NodeJsScan - A static security code scanner for Node.js applications
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/shengqi158/pyvulhunter - A static security code scanner for Python applications
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/python-security/pyt - A static analysis tool for detecting security vulnerabilities in Python web applications
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/emanuil/php-reaper - PHP tool to scan ADOdb code for SQL injections
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/lowjoel/phortress - A PHP static code analyser for potential vulnerabilities
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/infobyte/faraday - Collaborative penetration test and vulnerability management platform
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/az0ne/AZScanner - Automatic all-around scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/blackye/lalascan - Distributed web vulnerability scanning framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/blackye/BkScanner - Distributed, plug-in web vulnerability scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/ysrc/GourdScanV2 - Passive vulnerability scanning system
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/netxfly/passive_scan - Realization of web vulnerability scanner based on http proxy
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/1N3/Sn1per - Automated pentest recon scanner
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/RASSec/pentestEr_Fully-automatic-scanner - Directional fully automated penetration testing
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Lcys/lcyscan - A vuls scanner, plugins supported
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Xyntax/POC-T - Penetration test plug-in concurrency framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/v3n0m-Scanner/V3n0M-Scanner - Scanner in Python3.5 for SQLi/XSS/LFI/RFI and other vulns
Rating: 🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✖️
- https://github.com/Skycrab/leakScan - Multiple vuls scan supports web interface
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/zhangzhenfeng/AnyScan - A automated penetration testing framework
Rating: 🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Tuhinshubhra/RED_HAWK - An all In one tool For information gathering, SQL vulnerability scanning and crawling, coded In PHP
Rating: 🌟🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/swisskyrepo/DamnWebScanner - Another web vulnerabilities scanner, this extension works on Chrome and Opera
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/anilbaranyelken/tulpar - Web Vulnerability Scanner written in Python,supported multiple web vulnerabilities scan
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/m4ll0k/Spaghetti - A web application security scanner tool,designed to find various default and insecure files, configurations and misconfigurations
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/Yukinoshita47/Yuki-Chan-The-Auto-Pentest - An automated penetration testing tool this tool will auditing all standard security test method for you
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/0xsauby/yasuo - ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Rating: 🌟🌟🌟 | Language: Ruby | Ongoing[last 6 months]: ✖️
- https://github.com/hatRiot/clusterd - application server attack toolkit
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/erevus-cn/pocscan - Open source and distributed web vulnerability scanning framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/TophantTechnology/osprey - Distributed web vulnerability scanning framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/yangbh/Hammer - A web vulnerability scanner framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Lucifer1993/AngelSword - Web vulnerability scanner framework based on python3
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/zaproxy/zaproxy - One of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers
Rating: 🌟🌟🌟🌟 | Language: Java | Ongoing[last 6 months]: ✔️
- https://github.com/s0md3v/Striker - Striker is an offensive information and vulnerability scanner
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/dermotblair/webvulscan - Written in PHP and can be used to test remote, or local, web applications for security vulnerabilities
Rating: 🌟🌟 | Language: PHP | Ongoing[last 6 months]: ✖️
- https://github.com/alienwithin/OWASP-mth3l3m3nt-framework - Penetration testing aiding tool and exploitation framework
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/toyakula/luna - An open-source web security scanner which is based on reduced-code passive scanning framework
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/Manisso/fsociety - A Penetration Testing Framework including Information Gathering,Wireless Testing,Web Hacking and so on
Rating: 🌟🌟🌟 | Language: Python 2.x/3.x | Ongoing[last 6 months]: ✔️
- https://github.com/boy-hack/w9scan - A web vulnerability scanner framework,running with 1200+ plugins
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/YalcinYolalan/WSSAT - Web service security assessment tool,provide simple .exe application to use based on Windows OS
Rating: 🌟🌟 | Language: C# | Ongoing[last 6 months]: ✖️
- https://github.com/AmyangXYZ/AssassinGo - An extenisble and concurrency pentest framework in Go
Rating: 🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/m4ll0k/Galileo - Web application audit framework,like metasploit
Rating: 🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/joker25000/Optiva-Framework - Web Application Scanner
Rating: 🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✖️
- https://github.com/theInfectedDrake/TIDoS-Framework - The offensive web application penetration testing framework
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/TideSec/WDScanner - A full-featured vulnerability scanner for enterprise security
Rating: 🌟🌟🌟🌟 | Language: Python 2.x/PHP | Ongoing[last 6 months]: ✔️
- https://github.com/j3ssie/Osmedeus - Fully automated offensive security tool for reconnaissance and vulnerability scanning
Rating: 🌟🌟🌟🌟 | Language: Python 3.x | Ongoing[last 6 months]: ✔️
- https://github.com/jeffzh3ng/Fuxi-Scanner - Open source network security vulnerability scanner with asset discovery & management
Rating: 🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/knownsec/Pocsuite - Open-sourced remote vulnerability testing framework
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
- https://github.com/opensec-cn/kunpeng - An open source POC framework written by Golang that provides various language calls in the form of a dynamic link library
Rating: 🌟🌟🌟🌟🌟 | Language: Go | Ongoing[last 6 months]: ✔️
- https://github.com/Neo23x0/Loki - Simple IOC and Incident Response Scanner
Rating: 🌟🌟🌟🌟🌟 | Language: Python 2.x | Ongoing[last 6 months]: ✔️
The purpose of this collection is to provide various types of open-source security scanners that can help companies to be more safer.
[↑] means update scanner URL or description
[+] means add scanner
[-] means remove scanner
[category] means change scanner category
[contributor] means add someone to Acknowledgments
Wester(Twitter @Zhiyang Zeng) & Martin(Twitter @Martin Chow)
The scanners provided by this project are for research and study purposes only, and you must obey the laws and regulations of your country during use. If you are a Chinese citizen, please ensure you are obedient to The Cyber Security Law of the People's Republic of China, and please do not break the article 286 of the Criminal Law of the People's Republic of China for the regulation on the crime of destroying computer systems. At last, I would like to point out to you that you must be fully held responsible duty for any consequence that may arise.
If you have any questions about this project ,or you have found some valuable scanners, please feel free to tell us :)
scanbox is released under the Mozilla license.
It's happy to see that this repository has been widely spreaded in information security community, but I hope everyone could at all times respect knowledge and our efforts, so please specify reproduced from https://github.com/We5ter/Scanners-Box in your articles, and please do not republish this article for profit.
We would like to thanks the following security researchers for their valuable feedbacks amd suggestions.
- @0c0c0f
- @藏形匿影
- @Mottoin team
- @BlackHole
- @CodeColorist
- @3xp10it
- @re4lity
- @s0md3v
- @boy-hack
- @marsII
- @tom0li
- @hksanduo
- @alexlauerman
- @MedivhMT
©Monster Zero Team 2019