Awesome GitHub RepositoriesSecurity Scanners

Este proyecto es una herramienta de análisis estático y linter diseñado para mejorar la calidad, fiabilidad y portabilidad de los scripts de shell. Al realizar un análisis estructural profundo, identifica errores comunes de programación, errores de sintaxis y vulnerabilidades de seguridad antes de que se ejecuten los scripts. Funciona como un revisor de código automatizado que aplica las mejores prácticas y ayuda a los desarrolladores a mantener un código consistente y robusto en diferentes entornos operativos. La herramienta se distingue por su resolución gramatical consciente del dialecto, que adapta su lógica de análisis según el intérprete de shell específico detectado. Utiliza un motor sofisticado que construye un árbol de sintaxis abstracta para evaluar la lógica, las comillas y las preocupaciones de portabilidad. Los desarrolladores pueden ejercer un control granular sobre el proceso de análisis utilizando directivas en línea para suprimir advertencias específicas o configurar cómo la herramienta resuelve los archivos fuente externos. El proyecto cubre una superficie integral de capacidades de diagnóstico, que van desde la validación fundamental de sintaxis hasta comprobaciones lógicas complejas. Proporciona orientación sobre la construcción idiomática de scripts, incluyendo el manejo seguro de archivos, operaciones aritméticas eficientes y la sustitución adecuada de comandos. Estas características aseguran colectivamente que los scripts se adhieran a los estándares POSIX y permanezcan compatibles en varias implementaciones de shell. La herramienta se distribuye como una utilidad de línea de comandos, lo que permite la integración en flujos de trabajo de desarrollo para proporcionar retroalimentación inmediata sobre la integridad del script.

This project is a Git DevOps platform and repository manager providing a complete toolset for hosting Git repositories, managing project tasks, and automating software delivery pipelines. It functions as a self-hosted version control system with integrated access controls, an issue tracker for project management, and a CI/CD pipeline orchestrator. The platform distinguishes itself by integrating DevSecOps capabilities, specifically a security scanner designed to detect secret leaks and API keys during the code review process. It coordinates the entire DevOps lifecycle, linking version control

Strix is an automated security research and vulnerability scanning platform that leverages language models to orchestrate complex security analysis tasks. It functions as a comprehensive framework for penetration testing and continuous security integration, allowing users to embed automated vulnerability research directly into development pipelines or execute it within isolated, containerized environments. The platform distinguishes itself through a multi-agent orchestration engine that coordinates specialized autonomous agents to perform parallel security assessments. By integrating LLM-agno

Fail2ban is an intrusion prevention system that monitors system log files to detect malicious activity and automatically enforce security policies. By parsing log data in real time, the tool identifies patterns of unauthorized access or repeated authentication failures and responds by dynamically updating network access control lists to restrict offending sources. The software functions as a firewall automation tool that maintains stateful tracking of suspicious behavior across various network services. It utilizes a regex-driven pattern matching engine to identify specific attack signatures,

This project is a comprehensive, curated directory of static analysis, linting, and security scanning utilities. It serves as a central resource for developers to discover, compare, and select tools based on specific programming languages, licensing models, and integration requirements. The directory distinguishes itself by providing deep metadata for each listed utility, including community-driven popularity rankings, maintenance status, and deployment methods. By aggregating these tools into a single searchable index, it enables teams to identify solutions for enforcing coding standards, ma

fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram

This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte

WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the

testssl.sh is a network security tool and SSL/TLS security scanner used to audit server configurations. It functions as a diagnostic utility that validates supported ciphers and protocols to identify cryptographic vulnerabilities and flaws in encrypted communication. The tool is available as both a command-line utility and a dockerized security scanner, allowing for execution in isolated environments without the need for local dependency installation. Its capabilities cover SSL configuration auditing and TLS server security analysis. The system exports scan results into structured reports a

kube-bench is a Kubernetes security benchmark scanner and configuration auditor. It verifies if a cluster adheres to the Center for Internet Security standards and other hardening guides to identify security misconfigurations and vulnerabilities. The tool operates as a containerized security scanner, utilizing host namespaces to analyze nodes and control plane components without requiring the installation of binaries directly on the host. It supports multiple Kubernetes distributions, applying environment-specific benchmarks to ensure auditing accuracy for managed services. The project cover

Brakeman is a static analysis security tool and scanner specifically designed for Ruby on Rails source code. It identifies common security vulnerabilities, such as injection and cross-site scripting, by analyzing the application codebase without executing the application. The tool functions as a security auditor that detects mass assignment risks and template vulnerabilities. It evaluates the final output of rendered views and identifies unrestricted assignment patterns that could allow unauthorized modification of model attributes. The system provides vulnerability management through the us

jwt_tool is a security testing toolkit designed for analyzing, tampering with, and auditing JSON Web Tokens to identify cryptographic vulnerabilities and implementation flaws. It serves as a comprehensive suite for security auditing and vulnerability scanning, providing a debugging interface to inspect token headers and payloads. The project distinguishes itself through specialized capabilities for token forgery and secret cracking. It includes a token generator that signs custom tokens using RSA, ECDSA, and symmetric algorithms, and a brute force tool that uses high-speed dictionary attacks

WordPress boilerplate with Composer and Git, easier configuration, and an improved folder structure

Faraday is a vulnerability management platform and security tool aggregator designed to centralize security findings from multiple scanners into a single dashboard. It utilizes a relational security database to catalog hosts, services, and security flaws, enabling users to track remediation and analyze organizational risk. The platform distinguishes itself through a plugin-based system that normalizes diverse security tool outputs into a unified data model. It supports deep integration with a wide array of scanners and CLI tools, intercepting shell command output or parsing report files to ag

Wfuzz is a web application fuzzing framework that automates the injection of payloads into HTTP requests to discover hidden resources, parameters, and vulnerabilities. It functions as a content discovery scanner, a brute-force tool for credential guessing, and a plugin-based vulnerability scanner, all within a single modular system. The tool distinguishes itself through its plugin-based extensibility, allowing custom Python modules to add new payload sources, output printers, or scanning logic without modifying core code. It supports concurrent request dispatch using thread-based parallelism

Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str

DeepAudit is a privacy-preserving code audit platform that combines multiple specialized AI agents to identify and verify security vulnerabilities in source code. It functions as a local LLM vulnerability scanner, an automated security report generator, and a sandboxed exploit verifier, all operating entirely within an internal network to keep sensitive code and data on premises. What distinguishes DeepAudit is its multi-agent cooperative approach: teams of AI agents jointly plan, analyze, and cross-check findings across the codebase, moving beyond single-pass scanning. The platform also sand

Pa11y es un auditor de accesibilidad web automatizado y escáner de cumplimiento WCAG. Funciona como una herramienta de prueba de navegador headless y una API de accesibilidad de Node.js que identifica barreras para usuarios con discapacidades utilizando reglas automatizadas y estándares de la industria. El proyecto proporciona una interfaz programable para activar auditorías y recuperar objetos de resultados estructurados dentro de aplicaciones JavaScript. Se distingue por capacidades como la simulación de interacción del usuario, la sincronización del estado de la página y la capacidad de restringir los alcances de las pruebas utilizando selectores CSS para auditar regiones específicas de la página. El sistema admite la auditoría de páginas masivas y sirve como una puerta de accesibilidad para pipelines de CI/CD para bloquear despliegues cuando se detectan regresiones. Las capacidades amplias incluyen el monitoreo de tendencias de salud de accesibilidad a través de paneles, la configuración de entornos de navegador y la exportación de informes de cumplimiento en múltiples formatos. Está disponible como una interfaz de línea de comandos y una librería de Node.js basada en promesas.

MemProcFS es una herramienta de análisis de memoria volátil y un sistema de adquisición de memoria multiplataforma. Funciona como un sistema de archivos virtual de análisis forense de memoria, mapeando la memoria física y los objetos del kernel en una estructura de directorio virtual que permite a los usuarios analizar artefactos del sistema utilizando herramientas estándar de sistema de archivos. El proyecto se distingue por proporcionar un sistema de archivos virtual para análisis forense de memoria, permitiendo navegar y consultar la memoria física como archivos y carpetas de solo lectura. También incorpora un escáner de memoria basado en Yara para identificar firmas de malware y código inyectado dentro de la memoria física. El motor cubre una amplia gama de capacidades forenses, incluyendo inspección de procesos e hilos, listado de conexiones de red y análisis del registro de Windows. Admite la ingesta de datos desde sistemas en vivo, volcados de memoria (crash dumps) y máquinas virtuales, mientras proporciona resolución de símbolos para traducir direcciones de memoria sin procesar en nombres significativos. La integración se admite mediante una interfaz programática multilingüe y envoltorios de biblioteca nativos para C y Java, así como scripting en Python para flujos de trabajo automatizados.

Flan es un escáner de vulnerabilidades de red y auditor de seguridad contenedorizado. Identifica puertos abiertos y versiones de servicios a través de una red para detectar debilidades de seguridad conocidas y configuraciones erróneas. El sistema está diseñado para ejecutarse dentro de entornos de contenedores aislados, utilizando mapas de configuración para gestionar listas de objetivos y secretos. Incluye un mecanismo dedicado para archivar archivos de salida de escaneo y datos de análisis de seguridad en buckets S3 remotos para almacenamiento a largo plazo. La herramienta genera resúmenes de vulnerabilidades formateados e informes de seguridad en múltiples formatos de documento para análisis técnico. Admite la exportación de datos de escaneo sin procesar a almacenamiento en la nube remoto para auditorías de seguridad centralizadas.