剑庭安
首页
黑客安全首页全部安全栏目 黑客技术黑客技术、渗透测试、漏洞利用工具与教程 安全软件安全工具、扫描器、检测与审计软件 病毒分析恶意软件分析、样本、逆向与沙箱 CTF思路CTF 题目、writeup、解题思路与工具 防护思路防御技术、加固、检测响应与蓝队 红蓝攻防红队攻击模拟、蓝队对抗、攻防演练 漏洞知识库漏洞、CVE、PoC、EXP 与安全研究
逆向|反编译
PHP源码PHP 网站源码、程序、系统 APP源码安卓/iOS APP 源码 ASP源码ASP 网站源码与程序 NET源码.NET 网站源码与系统 小程序源码微信/支付宝小程序源码 Dedecms风格模板Dedecms 织梦风格模板 Empirecms风格模板EmpireCMS 帝国风格模板 Discuz商业模板/插件Discuz 商业模板与插件 WordPress主题/插件WordPress 主题与插件 其它源码、模板其它各类源码与模板 游戏源码游戏源码与引擎项目 加密货币源码加密货币、区块链、钱包、USDT/比特币相关源码与工具 手游源码手机游戏源码、服务端、客户端与引擎项目 传奇源码热血传奇、传奇世界、复古传奇等客户端/服务端/引擎源码 页游源码网页游戏、H5 游戏、浏览器游戏源码 端游源码电脑单机游戏、PC 网游客户端/服务端源码
最新万能免驱动支持所有型号打印机下载程序 日历天气老黄历 · 每天同步真实日期与天气
站长工具站长工具 自助开通会员浏览该分类 其他资源qtziy SEO工具SEO工具 站群源码站群源码 泛程序泛程序 蜘蛛模板蜘蛛模板 蜘蛛池蜘蛛池 外链工具外链工具
搜索 自助开通会员🔓 破甲 API
登录 注册
首页 分类列表 黑客技术 Scanners-Box - The Ultimate …
Scanners-Box - The Ultimate Open-Source Security Arsenal for Hack 黑客技术 点击放大
作者：admin 发布：2026-10-05

Scanners-Box - The Ultimate Open-Source Security Arsenal for Hack

项目说明English | 简体中文 | Español<p align="center"><img src="./logo.png" width="300px"> </p><p align=&qu…
资源可下载 免费下载 0 条讨论
会员资源
开通会员后即可下载全部资源。
登录后开通会员
会员方案
169浏览量
0讨论
2下载链接
可下载资源状态
内容可验证
更新 2026-10-05
人工审核发布
评论区答疑

Scanners-Box - The Ultimate Open-Source Security Arsenal for Hack

Scanners-Box - The Ultimate Open-Source Security Arsenal for Hack

项目说明

English | 简体中文 | Español

<p align="center">
<img src="./logo.png" width="300px">
</p>

<p align="center">
<img src="./badges/.svg" alt="">
<img src="./badges/license.svg" alt="license">
<img src="./badges/scanners-count.svg" alt="scanners">
<a href=" src="./badges/daily-ai-picks.svg" alt="Daily AI 工具 Picks"></a>
<a href=" src="./badges/scancodex.svg" alt="ScanCodex MCP 服务端"></a>
<a href=" src="./badges/x-share.svg" alt="Share on X"></a>
</p>

Introduction

The Ultimate Open-源码 Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

> [!TIP]
> 📅 Tired of hunting all over the place for AI agent tools? → Scanners-Box Daily AI Tool Picks

Contents


<!-- START doctoc generated TOC please keep comment here to allow auto update -->
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->

> [!IMPORTANT]
> 🤖 AI & Autonomous Agents
>
> *The focus zone of Scanners Box — AI-dri security tooling.*
>
> - AI Autonomous Cybersecurity Agents
> - LLM-Powered Scanners
> - Security Auditing for AI Agents & Apps
> - AI Agent Runtime Controls
> - Security Auditing for Agent Skills
> - Autonomous Discovery and Remediation Skills

  • Scanners for Smart Contracts

  • Red Team vs Blue Team

  • Mobile App Packages Analysis

  • Binary Executables Analysis

  • Privacy Compliance

  • Subdomain Enumeration or Takeover

  • Database SQL Injection or Brute Force

  • Weak Usernames or Passwords Enumeration For Web

  • IoT Hardware Automated Audit

  • Mutiple types of Cross-site scripting Detection

  • Enterprise sensiti Leak Scan

  • Malware Detection

  • Assessment for Middleware

  • Special Categories Scannners for Web

  • Dynamic or Static Code Analysis

  • Modular Design Scanners or Detecting 框架

  • Ad Persistent Threat Detect

    • <!-- END doctoc generated TOC please keep comment here to allow auto update -->

    ***

    AI Autonomous Cybersecurity Agents

  • - Fully autonomous multi-agent pentesting system in Go — runs whole engagements inside an isolated Docker sandbox with 20+ built-in tools (nmap, metasploit, sqlmap), long-term memory, optional Neo4j knowledge graph, and a web console for human-in-the-loop monitoring

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A general-purpose state-space search 引擎 on autonomous penetration testing — no predefined roles or workflows, purely goal-dri

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Autonomous white-box AI pentester for web apps & APIs — analyzes 源码 代码, identifies attack , and executes real exploits pre-production

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Multi-agent AI platform for CTF automation — covers recon, scanning, exploitation, and flag capture end-to-end

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - LuaN1ao (鸾鸟) - A next-generation Autonomous Penetration Testing Agent powered by LLMs, integrating P-E-R Agent Collaboration with Causal Graph Reasoning to simulate security expert thinking patterns

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An AI-nati testing platform in Go, integrating 100+ tools, intelligent orchestration, role-based testing, skills system, full lifecycle management, and a built-in lightweight C2 框架 for authorized engagements

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Autonomous AI pentesting 引擎 performing continuous offensi across web, cloud, AD and Kubernetes. Uses agentic reasoning, real exploit execution and attack path analysis to deli .

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    LLM-Powered Scanners

  • - A minimal LLM-powered zero-day scanner by AISLE

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An agent-powered scanner for on-demand review of all 代码 in existing large-scale repos, surfacing hard-to-find issues that have been lurking in applications for a long time

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - High-fidelity scanner fusing agentic AI with nati, modularity, and precision

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Security Auditing for AI Agents & Apps

  • - LLM scanner for hallucination, data leakage, promp injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Designed to protect AI applications from prompt injection (PI) attacks

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fuzzing 框架 for Large Language Models

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A.I.G (AI-Infra-Guard) integrates capabilities such as AI infrastructure scanning, MCP 服务端 risk detection, and LLM security assessments

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Security auditor for AI agent configurations — scans Claude 代码 setups for hardcoded secrets, permission misconfigs, hook injection, MCP ser and prompt injection ; 268 rules across 15 modules, scored 0-100, with auto-fix, CI gating and compliance mapping (SOC 2 / PCI DSS / ISO 27001)

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    AI Agent Runtime Controls

  • - Sandboxed runtime for autonomous AI agents — declarative YAML policies enforce boundaries across filesystem, 网络, process and provider access, block data exfiltration and unauthorized egress, and inject credentials only into policy-admitted endpoints; runs Claude 代码, Codex, OpenCode and Copilot CLI in isolated containers on Docker, Podman, MicroVM or Kubernetes

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Microsoft's go toolkit for autonomous AI agents — a policy 引擎 authorizing tools and actions, zero-trust agent identity with short-li credentials, OS-le sandboxing, plus reliability engineering (circuit breakers, budget caps, audit trails); ships reference policy packs mapped to all 10 OWASP Agentic Top 10 categories

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Appro engine for AI agents — define policies to auto-approve safe actions, auto-deny dangerous ones, and route the rest to a human , Slack, Discord, or email

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Security Auditing for Agent Skills

  • - Security scanner for AI agent skills — detect , malicious patterns, and security risks before installing agent skills (Claude 代码, Codex CLI, Gemini CLI, etc.)

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A best-effort security scanner for AI Agent Skills — detects prompt injection, data exfiltration, and malicious 代码 patterns detection (YAML+YARA), LLM-as-a-judge, and beha dataflow analysis. Supports OpenAI Codex Skills, Cursor Agent Skills, and Claude 代码 commands.

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Autonomous Discovery and Remediation Skills

  • - Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can customize for end-to-end management

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A coding-agent skill for multi-phase security audits — recon, hunting, ad , reporting, structured output, and independent — with machine-readable findings

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Scanners for Smart Contracts

  • - Security analysis 工具 for E. Supports smart contracts built for Ethereum, Hedera etc.

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An Analysis Tool for Smart Contracts

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Official security scanner for Ethereum smart contracts supported by the Ethereum Foundation

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Static analysis 工具 that detects and bugs in Solidity programs

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatic 工具 for finding trace in Ethereum smart contracts

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Red Team vs Blue Team

    #### Supply Chain Analysis(SCA)

  • - Open 源码 工具 for software supply chain security

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    #### Container and Cluster

  • - A 工具 to gather information inside container/cluster and exploit them

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Docker security analysis & hacking tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The first 工具 for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Container security scanner for backdoor, malicious, weak pass and sensitive and the like.

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scan for in-production and exposed secrets, and identify attack paths to reach them remotely

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scan containers and host filesystems for unprotected keys, API tokens and passwords

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 to scan Kubernetes cluster for risky permissions

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static analysis of , Docker and Kubernetes cluster configuration detect toolkit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A scanner for container images and filesystems

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    #### Services fingerprint detection

  • - Core system fingerprint detection 工具 for Red team

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Mass bruteforce 网络 protocols and default credentials for ports

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    #### Man-In-The-Middle

  • - 工具 for 网络 Scan, Man in the Middle, 协议 Reverse Engineering and Fuzzing

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    #### The framework

  • - Multi-purpose network pentest framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Graphical, Modularization and weaponization intranet penetration 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Mostly used for asset collection before penetration and lateral mo of intranet

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Pentest 框架 for Windows/Linux/Mac intranet networks

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Quickly scan the reachable 网络 segmentation of the intranet

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Swiss army knife for pentesting Windows/Acti en

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - E intranet pentest scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 源码 代码 Management Attack Toolkit,such as GitHub Enterprise, GitLab Enterprise and Bitbucket 服务端

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Helps to scan misconfigured reverse proxy servers and misconfigured forward proxy servers

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A highly controllable and scalable automation 引擎 for red teams

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - secator - the pentester's swiss knife

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    #### Wireless Pentest

  • - Testing and disco flaws in ones own 网络

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 框架 for Rogue Wi-Fi Access Point Attack

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Suite of Tools written in Python for wireless auditing and security testing

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Searches for wifi-pineapple traces and calculate wireless 网络 security score

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A complete re-write of Wifite,Automated Wireless Attack 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Wi-Fi Exploitation 框架 for 2.4 and 5 Ghz both attacks

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A WLAN red team framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Mobile Apps Packages Analysis

  • - Scanning APK file for URIs, endpoints & secrets

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Collecting information from APK file, support self-defined rules

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Yet another static 代码 analyzer for malicious Android applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Android Malware (Analysis | Scoring) System

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Advance Android malware analysis 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks

    • > ![]() !GitHub last commit !GitHub stars !GitHub <img alt="BlacHatUSA-arsenal-2022" src="./badges/BlackHatUSA--arsenal-2022-blue.svg">

  • - An easy-to-learn/use static analysis 框架 for Ja for Android

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A comprehensi 代码 analysis 工具 for Android apps that is based on the OWASP MAS

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A pre-analysis 工具 for Android apps: it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Binary Executables Analysis

  • - A malware/botnet analysis 框架 written in Ruby

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Used for automated malware analysis and security assessment on the Linux system

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Static analyzer for automated reverse engineering and scanning in binaries

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Static analyzer for detecting common bug classes such as buffer o in binaries

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Binary 代码 static analyser, with IDA integration. Performs value and taint analysis

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Privacy Compliance

  • - Multi-cloud privacy compliance scanning platform, through Cloud Custodian's YAML DSL to define scanning rules

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Enterprise security and privacy compliance platform

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Subdomain Enumeration or Takeover

  • - A classical subdomain enumeration 工具 by lijiejie

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Speed and Precision subdomain enumeration 工具 by ringzero

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain enumeration 工具 with map record

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A DNS meta-query spider that enumerates DNS records, and subdomains,supported API

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain enumeration certificate transparency

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain enumeration

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Knock subdomain scan

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An intergratd Python subdomain enumeration 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Find brother domain

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A fast domain brute tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A simple and fast 工具 for bruting subdomains

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A powerful subdomain 工具 and domain takeovers finding tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A subdomain enumeration tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain enumeration tools for bug hunting

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A domain name & Email address collection 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - E-mail, subdomain and people names har

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A spider designed to find subdomains of a specific domain by crawling it

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fast subdomains enumeration 工具 for penetration testers

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain enumeration and information gathering 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Listing subdomains about a main domain

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Subdomain discovery through alterations and permutations

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Enumeration sub domains 工具,based on AsyncIO and non-repeating dict

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Abusing certificate transparency logs for getting HTTPS websites subdomains

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Dumain Bruteforcer, a fast and flexible domain bruteforcer

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - In-depth Attack Surface Mapping and Asset Discovery

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A subdomain discovery 工具 which has a simple modular architecture and has been aimed as a successor to sublist3r project

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A powerful subdomain takeover tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Powerful Subdomain Enumeration

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A high concurrency and cross platform subdomain scanner based on Golang

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An ultimate subdomains scanner integrated multiple subdomain scanning tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A stateless and cross-platform subdomain enumeration 工具, speed up to 30w/s on Mac and Windows, and 160w/s on Linux

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Find subdomains on GitHub

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Domain finder and Targets management, automated information collection, integrated with burpsuite

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Sub-Domain TakeO Scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Active and/or passive scan to obtain subdomains and search for open port

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automated subdomain enumeration 工具 by learning of regexes for DNS discovery

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A lightweight GPT model, trained to disco.

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Database SQL Injection or Brute Force

  • - A SQLi scanner and Charles

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A SQLi scanner with 99 lines of code

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A SQLi scanner for mongoDB

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A blind SQLi scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A SQLi scanner with Powershell script

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Another SQL scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A powerful MongoDB auditing and pentesting 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Python 框架 For NoSQL scanning and exploitation

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Simple script to automate brutforcing blind sql injection

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A initiative and passive SQL injection test tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Exploit time-based blind-SQL injection in HTTP-Headers

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A lightweight application used to find 数据库 information from a distant 服务端

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Massive SQL injection scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A friend of SQLmap which will do what you always expected from SQLmap

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - MySQL and MSSQL brute force and post exploitation 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A web-based, easy-to-use, SQL injection scanner and exploiter 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Weak Usernames or Passwords Enumeration For Web

  • - A python HTTP weak pass scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - SSH, Redis, mongoDB weak password bruteforcer

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A python HTTP weak password scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web application brute force 框架,supports Citrix Gateway,CiscoVPN and so on

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A common web weak_password cracking script,can detect batches of management backgrounds without codes

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    IoT Hardware Automated Audit

  • - Weak-password IoT devices scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - IoT Devices scanner via nmap

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Testing in devices and routers connected to the Internet

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Weak telnet password scanner based on password enumeration

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 网络 information gathering scanner,most useful to scan IoT

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Exploitation 框架 for embedded Devices,such as router

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Digital bond's ICS enumeration tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An IDA plug-in, based on sensiti parameter backtracking to assist in mining

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An ad security 工具 engineered specifically to scrutinize and detect threats within the intricate protocols utilized by IoT (Internet of Things) devices

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Linux scanner based on Salt Open and audit API, with Slack notifications and JIRA integration

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Local scanning programs for Windows and Linux operating systems

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Mutiple types of Cross-site scripting Detection

  • - A very simple reflected XSS scanner supports GET/POST

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Reflected XSS scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A plugin for browser that checks automatically whether a page haves XSS and CSRF

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - XSS command line 工具 for testing lists of XSS payloads on web apps

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fuzz and bruteforce parameters for XSS, WAFs detect and bypass

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A fully functional cross-site scripting scanner,supporting GET and POST parameters,and written in under 100 lines of 代码

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - DOM XSS scanner for Single Page Applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Faster reflected-xss and dom-xss scanner based on Phantomjs

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A powerful XSS scanner made in python 3.7

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Parameter Analysis and XSS Scanning 工具 based on golang

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Enterprise sensiti Leak Scan

  • - Enterprise assets collector based on search 引擎

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An ad dork searching 工具 that is capable of finding IP address /URL blocked by search 引擎,and can run sqlmap and nmap scans on the URL's

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Used for har information from GitHub

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Searching sensiti and contents in GitHub

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Github leak scan for enterprise

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Ad search tool and automation in Github

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Searches high entropy strings through git repositories

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatically launch Google hacking queries against a target domain

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - CLI 工具 that finds secrets accidentally committed to a git repo, eg passwords, private keys

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Github sensiti leakage scan

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Github leaked patrol

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 to capture all the git secrets by le multiple open 源码 git searching tools

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Github sensiti leakage monitor by SRC

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A docker and web based monitor for finding secrets and sensiti across GitHub

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A GitHub scanning 工具 that identifies hardcoded credentials, filtering the false positive data through machine learning models

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Malware Detection

  • - Simple webshell detector

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An awesome 工具 to detect potentially malicious PHP files

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Helps you find and identify PHP/Perl/Asp/Aspx shells

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Simple webshell detector

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A application that helps you find and identify PHP/Perl/Asp/Aspx shells

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Assessment for Middleware

  • - Target port scanning + system service fingerprint recognition

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Dynamic multi - thread sensiti leak detection 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Identify and fingerprint Web Application Firewall

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Tests SSL/TLS enabled services to disco cipher suites

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web fingerprint identification 工具, more fingerprint 数据库, more detection methods

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Comprehensive web information collection platform, easy to deploy, and practical

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Website fingerprinter

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Another website fingerprinter

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A new spider based on Python with more function including 网络 fingerprint search

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fast internet-wide scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scanning a 网络 asset information script

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web path scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - C-segment Banner with path scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Internal network port service scanners

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatic WAF Bypass Fuzzing Tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Try to find out the actual ip behind cdn

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Based on the Bing search 引擎 C / side-stop query, multi-threaded, supported API

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Multi-thread web directory enumerating 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A HTTP service detector with a crawler from IP/CIDR

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Distributed task distribution of the IP port scanner based on thorn

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fast TCP banner grabbing like zgrab, but supports much more 协议

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Detect if a gi is protected by a CDN

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Base on crawler result web path scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A prototype SSH configuration and policy scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scans domains for data on their HTTPS configuration and assorted other things

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 made to collect information of any domain pointing at a 服务端 and fingerprinter

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fingerprinter for CMS

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Sensiti scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Dynamic file detection 工具 based on crawler

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web content discovery tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A very simple way to find out which SSL ciphersuites are supported by a target

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web application 框架 and web content scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An ad multithreaded admin panel finder written in Python

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A default credential scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An open 源码 penetration testing 工具 that can analyse packets,decoding,scanning ports, pinging and geolocation of an IP

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - HellRaiser scan with nmap then correlates cpe's found with c to enumerate

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Ad scanning with Nmap NSE

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - WebApp information gatherer

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Analyze the security of any domain by finding all the information possible

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Passi scanner and web crawler based on Nikto DB

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A web service and WAF fingerprinter

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Just check security headers on a target website

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A speed and awesome sensiti scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A fast and powerfull dashboard (admin) finder

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 工具 to identify if a domain is a CMS such as Wordpress, Moodle, Joomla

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Detect and bypass web application firewalls and protection systems

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Go web application penetration test and web application fuzz 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Sensiti scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Get the website real IP address by scanning the entire net

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Distributed web fingerprint identification platform

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Find web directories without bruteforce

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An ad web directory scanning 工具 that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Incredibly fast crawler which extracts urls, emails, files, website accounts and much more

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Gather OSINT and fuzz for OWASP on a target website

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - OSINT and Web-based Footprinting modular 框架 based on the Recon-ng

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An internal 网络 scanner like meterpreter

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A multi-threaded 网络 reconnaissance 工具 which performs automated enumeration of services

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Local Network Scanner based on BBScan

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Intranet integrated scanning 工具,build for automatic, full co scanning

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Ports scan and host-ali

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 网络 scanner that 30x times faster than nmap

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Super fast port scanning & service discovery using Masscan and Nmap

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Port scanning, 协议 detection(1200+), fingerprint(1w+) and brute force cracking

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Directory/File, DNS and VHost busting 工具 written in Go

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Special Categories Scanners for Web

  • - A small python script to check for cross-Site tracing, Clickjacking etc

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - .git / .svn / .DS_Store disclosure exploit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A .svn folder disclosure exploit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A .git folder disclosure exploit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Jenkins detection, user grab enumerating

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - discuz scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • -CMS exploit framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An IIS shortname scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Flash XSS scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatic Ser Template Injection detection and exploitation 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Ruby 框架 for de and using modules which aid in the penetration testing of WordPress powered websites and systems

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A plugin for Burp Suite proxy to improve the test co during web application penetration tests on J2EE applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Struts2 vuls scanner base Perl script

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Totally automatic LFI exploiterand scanner supports reverse shell

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automated 客户端-side template injection detection for AngularJS

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scanners for IIS short filename 8.3 disclosure

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - WPScan rewritten in Python + some WPSeku ideas

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - CMS exploit framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatically scan the inner 网络 to detect whether they are

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A unique automated LFI exploiter with bind/reverse shells

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - This 工具 can be used to brute discover GET and POST parameters

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Struts2 vuls scanner,supported all vuls

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Auto scanning to SSL , such as heartbleed etc

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Java RMI enumeration and attack tool

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scanner detecting the use of Ja libraries with known

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The detector for Hadoop and Spark

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - RegEx Denial of service scanner for Node.js package

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web CMS exploit framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A tiny batch web scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - File upload scanner and exploitation 工具

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Wordpress scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A scanner detecting the use of Ja libraries with known

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 for automatically testing whether the upload function can upload webshell

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - OWASP is a Black Box scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Detect websites CMS & auto exploit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - CMS detection and exploitation suite

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - AWS security scanning checks

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scanner and massi for Wordpress,Magento,Joomla and so on

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - OWASP Joomla scanner project

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 工具 designed to help identify incorrectly configured Django applications that are exposing sensiti

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Sdn security e framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Intelligent Bot, Shell can achie injection, and help researchers detect security CMS system

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 used to hunt down API key leaks in JS files and pages

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Dynamic or Static Code Analysis

  • - A static 代码 analysis system that automates the detecting and security issue

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 that can scan php automatically using static analysis methods

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A tracing and troubleshooting 工具 for PHP scripts

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static security 代码 scanner for Node.js applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static security 代码 scanner for Python applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static analysis 工具 for detecting security in Python web applications

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - PHP 工具 to scan ADOdb 代码 for SQL injections

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A PHP static 代码 analyser for potential

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Ja code auditing system

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Static 代码 auditing system for PHP/Ja/Chrome EXT

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A 工具 designed to find common security issues in Python 代码

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static analysis 工具 for securing Go 代码

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A static analysis tool for Java

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The 工具 to help you find/track user input sinks and security bugs in Java, C++,GO, Python, ja, Swift etc. with regex rules

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Golang 工具 that does static analysis, unit testing, 代码 review and generate 代码 quality report

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - CodeQL tool for Go programs

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Inspects 源码 代码 for security problems by scanning the Go AST

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Modular Design Scanners or Detecting 框架

  • - Collaborati test and management platform

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automatic all-around scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Distributed web scanning framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Distributed, plug-in web scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Passi scanning system

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Realization of web scanner based on http proxy

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Automated pentest recon scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Directional fully automated penetration testing

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Penetration test plug-in concurrency 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Scanner in Python3.5 for SQLi/XSS/LFI/RFI and other vulns

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Multiple vuls scan supports web interface

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A automated penetration testing 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An all In one 工具 For information gathering, SQL scanning and crawling, coded In PHP

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Another web scanner, this extension works on Chrome and Opera

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web Scanner written in Python,supported multiple web scan

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An automated penetration testing 工具 this 工具 will auditing all standard security test method for you

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - ruby script that scans for & exploitable 3rd-party web applications on a 网络

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - application ser toolkit

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Open 源码 and distributed web scanning 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Distributed web scanning framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A web scanner framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web scanner framework based on python3

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - One of the world’s most popular free security tools and is actively maintained by hundreds of international

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Striker is an offensi and scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Written in PHP and can be used to test remote, or local, web applications for security

    • > ![]() !GitHub last commit !GitHub stars !GitHub
    >

  • - Penetration testing aiding 工具 and exploitation 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An open-源码 web security scanner which is based on reduced-代码 passi 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A Penetration Testing 框架 including Information Gathering,Wireless Testing,Web Hacking and so on

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A web scanner 框架,running with 1200+ plugins

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web service security assessment 工具,provide simple .exe application to use based on Windows OS

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An extenisble and concurrency pentest 框架 in Go

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Web Application Scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The offensive web application penetration testing 框架

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A full-featured scanner for enterprise security

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Fully automated offensi 工具 for reconnaissance and scanning

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Open 源码 网络 security scanner with asset discovery & management

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Open-sourced remote testing framework

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An open 源码 POC 框架 written by Golang that provides language calls in the form of a dynamic link library

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The Swiss Army knife for automated Web Application Testing

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - The totally new generation of WDScanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Yet another web security scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A general purpose 网络 security scanner with an extensible plugin system for detecting high se with high confidenc by Google

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A scanner based on the Spring Boot micro-service,supports distributed port () scanning, asset security management, real-time threat monitoring and notification, lifecycle, wiki, email notification, etc

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - A fast 工具 for configurable targeted scanning based on templates offering massi

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - rapid response,scanning system for intranet

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - An agile asset reconnaissance system

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - SEC can be used for enterprises to scan and check the security of ser which has strong controllability, supports distributed multi-node deployment

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - One Security assessment/management 工具 to solve all the security team problems

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - 框架, corporate assets analysis and rapid scanner for 1day

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Security tools for web detection(界面 : )

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - RuoYi (若依) dedicated scanner: plugin architecture, three-state , WAF bypass, exploit chains, AI POC generation, nuclei compatible

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    Ad Persistent Threat Detect

  • - Simple IOC and Incident Response Scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

  • - Simple IOC and Incident Response Scanner

    • > ![]() !GitHub last commit !GitHub stars !GitHub

    ***

    Why Create This Collection?

    The purpose of this collection is to provide types of open-源码 security scanners that can help companies to be more safer.

    Commit Con

    This project follows Con Commits for commit messages:

    | Type | Description |
    |:-----|:------------|
    | feat(scanner): xxx | Add a new scanner |
    | fix(scanner): xxx | Update scanner info |
    | remo): xxx | Remove a scanner |
    | feat(category): xxx | Add a new category |
    | remo): xxx | Remove a category |
    | docs(credits): xxx | Update acknowledgments |
    | chore: xxx | Other changes |

    Authors

    Wester(Twitter <a href=" Zeng</a>) & Martin(Twitter <a href=" Chow</a>)

    Legal Disclaimer

    The scanners provided by this project are for research and study purposes only, and you must obey the laws and regulations of your country during use. If you are a Chinese citizen, please ensure you are obedient to *The Cyber Security Law of the People's Republic of China*, and please do not break the article 286 of *the Criminal Law of the People's Republic of China* for the regulation on the crime of destroying computer systems. At last, I would like to point out to you that you must be fully held responsible duty for any consequence that may arise.

    How to contribute?

    If you have any questions about this project ,or you ha some scanners, please feel free to tell us :)

    License

    The content of this Repository is released under the <CC BY-NC-ND 4.0> license.

    Copyright

    It's happy to see that this repository has been widely spreaded in information security community, but I hope e could at all times respect knowledge and our efforts, so please specify reproduced from in your articles, and please do not republish this article for profit.

    Sponsors

    <table align="center">
    <tr>
    <td align="center" width="100">
    <img src=" width="60" height="60"><br>
    <sub><b>Albert</b></sub>
    </td>
    <td align="center" width="100">
    <a href="
    <img src=" width="60" height="60" style="opacity:0.25; filter:grayscale(1)"><br>
    <sub>Your name here</sub>
    </a>
    </td>
    </tr>
    </table>

    <p align="center">
    <a href=" target="_blank"><img src="badges/blue.svg" width="200"></a>
    &nbsp;
    <a href=" target="_blank"><img src=" width="200" alt="Buy Me A Coffee"></a>
    </p>

    Acknowledgments

    We would like to thanks the following security researchers for their feedbacks amd suggestions.

  • @0c0c0f

  • @藏形匿影

  • team



  • @3xp10it



  • @boy-hack







  • @0xHJK


  • -d




  • Lounici

  • Owen Garrettz

    • Stargazers

    <p align="center">
    <a href="
    <img src=" alt="GitHub Stars">
    </a>
    <br/><br/>
    <img src=" alt="Star History Chart">
    </p>

    &copy;<a href=" target="_blank">Monster Zero Team</a> 2017-2026

    项目信息

    开发语言：未知

    Star 数：9083

    技术要点

    该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕The Ultimate Open-源码 Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

    从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

    使用与学习建议

    1. 下载源码压缩包，解压到本地环境。

    2. 根据项目类型准备对应的运行环境与依赖。

    3. 按照 README 中的步骤完成配置与部署。

    4. 在隔离的测试环境中运行验证，避免影响生产系统。

    免责声明

    本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

    资源标题Scanners-Box - The Ultimate Open-Source Security Arsenal for Hack
    所属分类黑客技术
    发布作者admin
    发布时间2026-10-05 22:29:30
    下载权限 免费下载
    附件数量2 个下载链接
    浏览次数169
    讨论数量0
    主题状态正常讨论中

    本资源免费，登录后即可在本页「下载链接」区域获取全部附件。

    请在评论区留言说明具体链接，或联系作者补档。楼主更新后本页会同步最新的下载地址。

    请先阅读正文中的授权说明；未注明的默认仅限站内学习交流，禁止直接搬运到其他站点二次售卖。
    还没有讨论，快来抢沙发～
    登录 后才能参与讨论
    下载链接
    会员才能下载
    登录后开通会员
    同分类推荐
    暂无同类资源
    免费登录即可下载
    查看会员
    放大预览

    © 2026 剑庭安 - 网站开发定制 SEO 优化蜘蛛池代做 在线看手相算命. 保留所有权利。

    Powered by 酷像SEOv3.0

    网站地图 Sitemap.xml
    首页 全部分类 黑客安全 逆向|反编译 精品源码 站长工具自助开通会员其他资源SEO工具站群源码泛程序蜘蛛模板蜘蛛池外链工具创意乐园 搜索 会员服务 登录 注册