Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

security vulnerability-detection hacktoberfest security-scanner vulnerability-assessment vulnerability-scanner dast attack-surface subdomain-takeover cve-scanner nuclei-engine

• Updated Nov 11, 2026
• Go

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

mcp security-scanner security-tools ai-security supply-chain-security prompt-injection agentic-ai agent-skills agent-security claude-code security-workflow

• Updated Nov 12, 2026
• Python

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening

• Updated Sep 16, 2026
• Shell

The ZAP by Checkmarx Core project

security opensource zap appsec hacktoberfest security-scanner dast zaproxy zap-development

• Updated Nov 12, 2026
• Java

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner

• Updated Nov 11, 2026
• Go

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

wordpress security scanner scan wpscan hacking-tool security-scanner wpvulndb

• Updated Nov 7, 2026
• Ruby

Bandit is a tool designed to find common security issues in Python code.

python security static-code-analysis linter security-scanner security-tools bandit

• Updated Nov 9, 2026
• Python

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

iot security awesome cloud shodan hacking internet-of-things penetration-testing infosec awesome-list pentesting security-scanner security-tools dorks network-infrastructure shodan-dorks

• Updated May 27, 2024

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

react typescript ai developer-tools code-review code-quality security-scanner devsecops vulnerability-scanner sast xai code-audit vite bug-detection supabase llm google-gemini

• Updated Nov 1, 2026
• Python

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

ssh golang tools attack nmap brute-force recon nuclei auto bugbounty vulnerability-detection hacker vulnerability-scanners security-scanner 0day security-tools pentest-tool hacktools bugbounty-tools vulnerabilities-scan

• Updated Jul 12, 2024
• Go

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

• Updated Mar 24, 2025
• C#

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

detection static-analysis security-scanner security-tools software-characterization application-inspector

• Updated Sep 15, 2026
• C#

A high performance offensive security tool for reconnaissance and vulnerability scanning

osint scanner hacking enumeration fuzzing pentesting offensive-security hacking-tool security-scanner vulnerability-assessment information-gathering reconnaissance pentest-tool vulnerability-scanner raccoon

• Updated Apr 21, 2026
• Python

Advanced vulnerability scanning with Nmap NSE

security security-audit lua exploit lua-script nmap penetration-testing vulnerability vulnerability-databases vulnerability-detection nse vulnerability-identification vulnerability-scanners security-scanner vulnerability-assessment nmap-scripts nsescript nmap-scan-script vulnerability-scanning vulnerability-database-entry

• Updated Feb 6, 2026
• Lua

💡 A hinting engine for the web

lint security performance pwa best-practices a11y interoperability hacktoberfest hint security-scanner hints pwas webhint

• Updated Jul 21, 2026
• TypeScript

Source Code Security Audit (源代码安全审计)

security-audit cobra security-scanner security-tools sourcecode-analysis code-audit

• Updated Sep 16, 2022
• Python

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

go kubernetes security charts automation analysis static-code-analysis ci helm linter k8s kubernetes-monitoring hacktoberfest security-scanner kubernetes-manifests kube-score static-code-analyzer

• Updated May 20, 2026
• Go

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

security security-audit privacy static-code-analysis static-analysis owasp dataflow vulnerability code-quality compliance vulnerabilities appsec security-scanner gdpr security-automation security-tools devsecops sast devsecops-tools

• Updated Nov 11, 2026
• Go

nodejsscan is a static security code scanner for Node.js applications.

nodejs javascript lint security node static-analysis code-analysis code-review security-scanner devsecops sast node-security nodejsscan

• Updated Sep 21, 2026
• CSS

Semi-automatic OSINT framework and package manager

rust security intelligence security-audit osint lua location certificate-transparency bug-bounty pentesting recon security-scanner investigation reconnaissance osint-framework

• Updated Sep 20, 2026
• Rust