Awesome GitHub RepositoriesWeb Asset Probing

Nuclei is a modular security scanning framework designed for automated vulnerability detection and infrastructure reconnaissance. It functions as a template-driven engine that executes security checks across diverse network protocols, allowing users to define custom detection logic to identify vulnerabilities, misconfigurations, and exposed assets. The platform distinguishes itself through its highly extensible architecture, which supports distributed scanning, headless browser automation for dynamic web content, and out-of-band interaction monitoring to detect blind vulnerabilities. It integ

This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t

Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization, security hardening, and service troubleshooting. It functions as a platform for analyzing containerized applications through both static metadata review and dynamic behavioral probing, enabling users to understand image composition and runtime dependencies. The project distinguishes itself by automating the creation of minimal, production-ready container images. It achieves this by removing unnecessary files and components, flattening image layers, and synthesizing restrictive

RustScan is a high-speed network reconnaissance tool designed for automated port discovery and service enumeration. It functions as an automated vulnerability scanner that identifies open ports and active services across network environments, providing a foundation for mapping attack surfaces and gathering intelligence on target systems. The tool distinguishes itself through its ability to dynamically adjust scanning parameters and concurrency in real-time based on system feedback, ensuring efficient performance while preventing network congestion. It features an extensible architecture that

Subfinder is a security reconnaissance framework designed for subdomain enumeration and attack surface management. It functions as a discovery engine that identifies and maps internet-exposed infrastructure, cloud-hosted assets, and network ranges to maintain a comprehensive inventory of an organization's digital footprint. The project distinguishes itself through a modular, template-driven scanning engine that executes security checks against discovered assets. It leverages cloud-native asset discovery to query provider APIs and infrastructure metadata, while supporting distributed agent orc

Beats is a collection of lightweight, modular agents designed to gather, process, and forward operational telemetry from distributed infrastructure to centralized storage and analysis platforms. These agents function as a distributed data transport layer, decoupling the collection of logs, metrics, and network events from their final delivery destination. By maintaining local state and managing data flow, the system ensures reliable transmission of information across heterogeneous environments. The project distinguishes itself through a modular pipeline architecture that allows for the assemb

Gatus is a service health monitoring tool and automated status page that tracks the availability and performance of endpoints. It functions as a multi-protocol uptime monitor, validating service health through response conditions, certificate expiration checks, and multi-step workflow executions. The system distinguishes itself by supporting a wide range of communication standards including HTTP, TCP, UDP, WebSocket, gRPC, and DNS. It enables the creation of developer-oriented dashboards that display real-time uptime, publish incident announcements, and generate dynamic uptime badges for exte

httpx is a suite of tools and libraries for HTTP reconnaissance, infrastructure discovery, and DNS resolution. It functions as a command line toolkit for extracting metadata and status codes from HTTP targets and CIDR ranges, as well as a Go library for integrating these probing capabilities into custom programs. The project distinguishes itself through specialized infrastructure profiling, using TLS fingerprinting to extract JARM hashes and certificate details. It identifies underlying components such as CDN usage, Autonomous System Numbers, and CNAMEs to map web server software and infrastr

The Prometheus Operator is a Kubernetes monitoring orchestrator and controller that manages Prometheus clusters and observability components through declarative custom resources. It functions as a custom resource controller that translates high-level Kubernetes resource definitions into the configuration files required by the underlying monitoring software. The project automates the deployment, scaling, and lifecycle of an observability stack, including the integration of components like Thanos and Alertmanager. It distinguishes itself by syncing monitoring targets, alerting rules, and scrape

This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte

testssl.sh is a suite of diagnostic tools and a network security auditor used to scan network ports for supported encryption protocols, ciphers, and vulnerabilities in TLS and SSL configurations. It functions as a security scanner that evaluates the cryptographic strength of a server by testing all available cipher suites. The tool analyzes server encryption strength and identifies security vulnerabilities or weak settings through TLS and SSL security auditing. It verifies that encryption is properly implemented on specific network ports and evaluates whether only strong and modern encryption

testssl.sh is a network security tool and SSL/TLS security scanner used to audit server configurations. It functions as a diagnostic utility that validates supported ciphers and protocols to identify cryptographic vulnerabilities and flaws in encrypted communication. The tool is available as both a command-line utility and a dockerized security scanner, allowing for execution in isolated environments without the need for local dependency installation. Its capabilities cover SSL configuration auditing and TLS server security analysis. The system exports scan results into structured reports a

wgcf is a network account manager and profile generator used to register service accounts and create configuration files for Cloudflare WARP. It enables the generation of standard WireGuard profiles that allow clients to connect to these network services. The tool includes mechanisms for service account registration and the binding of subscription licenses to activate premium network features. It manages the persistence of account identities and subscription data locally to maintain connectivity. Additional capabilities include network connection verification and diagnostic tools for tracing

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

Siege is an HTTP benchmarking utility and load testing tool used to analyze transaction rates and response times. It functions as a stress testing tool that pushes web servers to their limits to determine maximum sustainable load and failure points, while also serving as a performance analyzer for encrypted HTTPS connections. The tool distinguishes itself by simulating human browsing behavior through the use of random delays between requests and local management of cookies and authentication headers. This allows for more realistic user simulation and the assessment of server stability under c

Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

Dieses Projekt bietet einen umfassenden Architektur-Blueprint und Implementierungssatz für den Aufbau einer Platform-as-a-Service auf Kubernetes. Es dient als technische Ressource für die Bereitstellung von Container-Orchestrierungsumgebungen, die Verwaltung des gesamten Softwareentwicklungs-Lebenszyklus und die Integration einer vollständigen DevOps-Toolchain. Die Implementierung betont die automatisierte Softwarebereitstellung durch die Integration von Build- und Delivery-Pipelines, privaten Container-Registries und verteilten Konfigurationssystemen. Es ermöglicht die Entkopplung von Anwendungseinstellungen von Images über einen zentralen Konfigurationsmanager, was umgebungsspezifische Updates ohne Neuerstellung von Containern erlaubt. Die Plattform deckt ein breites Spektrum Cloud-nativer Funktionen ab, einschließlich Container-Netzwerk-Orchestrierung, Layer-4- und Layer-7-Traffic-Management sowie Microservice-Orchestrierung mit Rolling-Update-Strategien. Zudem integriert es einen vollständigen Observability-Stack für zentralisiertes Logging, Distributed Tracing und die Visualisierung von Zeitreihenmetriken. Das Projekt ist primär als Sammlung von Shell-Skripten und Konfigurationsdateien implementiert, um die Bereitstellung der Orchestrierungsschicht und der unterstützenden Dienste zu automatisieren.

Drozer is a security testing framework for Android applications that operates through an agent-based remote execution model. It combines a client-server command routing system with a device-side agent, enabling security assessments by mapping inter-process communication (IPC) attack surfaces and running dynamic exploit modules directly on Android devices. The framework distinguishes itself through its ability to discover and enumerate exported Android components by analyzing manifest data and crafting Intents to probe for vulnerabilities. It supports content provider query injection to detect

Dieses Projekt ist ein SSH-Sicherheitsaudit-Tool, das zur Analyse von Server- und Client-Konfigurationen entwickelt wurde. Es fungiert als kryptografischer Analysator, der Schlüsselaustausch-, MAC- und Verschlüsselungsalgorithmen bewertet, um schwache oder veraltete Primitive zu identifizieren und die Sicherheitskonformität sicherzustellen. Das Tool zeichnet sich dadurch aus, dass es einen Härtungsleitfaden mit plattformspezifischen Konfigurationsanweisungen und Algorithmus-Empfehlungen zur Behebung erkannter Schwachstellen bereitstellt. Es enthält zudem einen Denial-of-Service-Tester, der die Server-Resilienz gegen CPU-Erschöpfung und gleichzeitige Socket-Verbindungsangriffe misst. Breite Funktionen decken Sicherheitsaudits und Schwachstellentests ab, einschließlich der Validierung von Sicherheitsrichtlinien und der Identifizierung von Softwareversionen. Das Projekt führt zudem kryptografische Validierungen durch Diffie-Hellman-Modulus-Größentests durch und bewertet das Verhalten von Client-Software mittels listener-basierter Analyse.