3 Repos
Automated sequences of tools specifically designed to detect CVEs and injection flaws in web endpoints.
Distinct from Vulnerability Scanning: Focuses on the orchestration of web-specific probes and flaw detection rather than container image analysis
Explore 3 awesome GitHub repositories matching security & cryptography · Web Application Pipelines. Refine with filters or upvote what's useful.
fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram
Orchestrates automated probes to detect software bugs and remote code execution vectors in web endpoints.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
Implements an automated pipeline to test discovered web endpoints for common vulnerabilities and server misconfigurations.
Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet
Actively tests and crawls web applications to uncover OWASP Top 10 and common web vulnerabilities.