Awesome GitHub RepositoriesSecurity Scanning Workload Distribution

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Osmedeus is a security workflow orchestration engine that coordinates AI agents, shell commands, and scanning tools through declarative YAML pipelines. It functions as a distributed security scanner, a declarative workflow automator, and an AI agent framework for security, enabling automated multi-step security analysis with conditional branching, parallel execution, and distributed workers. The engine distinguishes itself through a hybrid runner model that executes workflow steps on the local host, inside Docker containers, or over SSH to remote machines, selected per step or module. It supp

Axiom هو منسق للبنية التحتية السحابية وإطار عمل موزع للمسح الأمني. يعمل كمدير لنشر، وأخذ لقطات، وتدمير أساطيل الأجهزة الافتراضية القابلة للتخلص منها عبر مزودي سحابة ومناطق متعددة. يتميز المشروع بأتمتة توفير مجموعات أدوات الثغرات وبرمجيات التدقيق الأمني عبر هذه الخوادم البعيدة. يتميز بآلية لتوزيع عمليات المسح الأمني عن طريق تقسيم قوائم الأهداف عبر أسطول من المثيلات وتجميع البيانات الناتجة في ملفات موحدة وتقارير HTML. يغطي النظام مجموعة واسعة من الإمكانيات التشغيلية، بما في ذلك تنفيذ الأوامر عن بُعد، ونقل الملفات المتوازي، وضبط الشبكة على مستوى النواة لأحمال العمل ذات التزامن العالي. كما يوفر أدوات لإدارة لقطات الصور، وأنفاق SSH لحركة مرور الشبكة، ونشر ملفات تعريف البنية التحتية المحددة مسبقاً.

Arachni is a dynamic application security testing vulnerability scanner and web application security tool. It functions as a distributed web audit framework that performs active and passive audits to identify security flaws such as SQL injection and cross-site scripting. The project features a JavaScript-aware web crawler that executes scripts and monitors DOM changes to analyze modern dynamic web applications. It utilizes server platform fingerprinting to target compatible security payloads and provides a grid-based system to distribute scanning workloads across multiple nodes. The tool cov

ScopeSentry is a distributed attack surface management platform designed to catalog digital assets and automate security assessments across large network environments. It functions as a network asset discovery tool and vulnerability scanner, providing a framework for maintaining visibility over organizational infrastructure. The platform distinguishes itself through a distributed architecture that orchestrates worker nodes to execute security tasks in parallel. It utilizes an event-driven discovery process to identify new assets and subdomains, maintaining a stateful record of configurations