awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
scipag avatar

scipag/vulscan

0
View on GitHub↗
www.computec.ch/projekte/vulscan↗

Vulscan

Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection.

The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchronizing vulnerability databases via automated or manual updates.

The project covers network security auditing and flaw identification, producing security audits through a template-based reporting system. This allows for the customization of vulnerability reports using predefined strings and dynamic templates.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Service Version Matching - Identifies security risks by matching detected service versions against local datasets without requiring an internet connection.
  • Nmap NSE Vulnerability Scanning - Leverages Nmap NSE scripts to identify known security flaws and vulnerabilities across network devices.
  • Network Vulnerability Scanning - Identifies potential attacker entry points by matching software versions against vulnerability databases.
  • Nmap Integration - Integrates with Nmap and the Nmap Scripting Engine for initial network discovery and service fingerprinting.
  • Network Security Auditing - Performs structured scans of network services to identify outdated software and critical vulnerabilities.
  • Network Service Auditors - Functions as a scanner that analyzes open ports and identifies outdated or vulnerable software versions across a network.
  • Version-Based Vulnerability Detection - Matches detected software banners against databases of known affected releases to identify security exploits.
  • Nmap-Based - Uses the Nmap Scripting Engine to detect software vulnerabilities by matching service versions against offline databases.
  • Offline Vulnerability Analysis - Maintains a local dataset of known security flaws for use in air-gapped or offline environments.
  • Vulnerability Report Templates - Uses standardized templates to generate consistent and technical security vulnerability reports.
  • Manual Fingerprint Overrides - Provides an interactive mode to manually correct detected software versions for specific ports.
  • Manual Version Overrides - Allows users to manually override misidentified software versions to ensure accurate vulnerability matching.
  • Customizable Report Templates - Produces detailed reports using custom templates to format discovered vulnerabilities for different stakeholders.
  • Vulnerability Database Management - Manages the loading and synchronization of local vulnerability datasets and custom database files.
  • Vulnerability Data Synchronization - Provides mechanisms for updating local security definitions from remote vulnerability sources.
  • Network and Web Reconnaissance - Advanced vulnerability scanning using Nmap NSE.
  • Security And Hardening - Advanced vulnerability scanning using network scripts.
  • Web Application Scanning - Network and service-level vulnerability scanner.
3,761 stars·695 forks·Lua·24 views

Star history

Star history chart for scipag/vulscanStar history chart for scipag/vulscan

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Vulscan

These projects share indexed features with Vulscan. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • dependency-check/dependencycheckdependency-check avatar

    dependency-check/DependencyCheck

    7,763View on GitHub↗

    DependencyCheck is a software composition analysis tool that identifies the third-party libraries a project depends on, maps them to Common Platform Enumeration identifiers, and links them to publicly disclosed CVE entries from the National Vulnerability Database. The result is a report listing each dependency alongside its matched identifiers and known vulnerabilities, so teams can see which components carry risk. The same analysis engine is available as a command line program for Linux, Windows, and macOS, as a Docker container, and as plugins for Maven, Gradle, Ant, and Jenkins. Inside a b

    Javaant-taskbuild-toolgradle-plugin
    View on GitHub↗7,763
  • wpscanteam/wpscanwpscanteam avatar

    wpscanteam/wpscan

    9,841View on GitHub↗

    WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the

    Ruby
    View on GitHub↗9,841
  • google/tsunami-security-scannergoogle avatar

    google/tsunami-security-scanner

    8,584View on GitHub↗

    Tsunami Security Scanner is a network vulnerability scanner and security auditor designed to identify high-severity flaws across network assets. It functions as an asynchronous security probe engine that utilizes automated probes and specialized detection logic to find critical weaknesses and prioritize remediation efforts. The project is distinguished by a plugin-based scanning engine, which uses a modular architecture of interchangeable detection plugins to identify vulnerabilities. This extensibility allows for the development and integration of custom security plugins to expand the variet

    Java
    View on GitHub↗8,584
  • owasp/nettackerOWASP avatar

    OWASP/Nettacker

    5,258View on GitHub↗

    Nettacker is an automated penetration testing framework designed to orchestrate reconnaissance, port scanning, and vulnerability detection. It functions as a network reconnaissance tool and vulnerability scanner that identifies open ports, fingerprints services, and checks systems against databases of known security flaws. The framework distinguishes itself by combining a web application crawler for discovering hidden paths via fuzzing with a vulnerability management system that persists scan results in a database to track historical assessments. It also includes specialized capabilities for

    Pythonautomationbruteforcecve
    View on GitHub↗5,258
Compare all 30 related projects→

Frequently asked questions

What does scipag/vulscan do?

Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection.

What are the main features of scipag/vulscan?

The main features of scipag/vulscan are: Service Version Matching, Nmap NSE Vulnerability Scanning, Network Vulnerability Scanning, Nmap Integration, Network Security Auditing, Network Service Auditors, Version-Based Vulnerability Detection, Nmap-Based.

Which projects share features with scipag/vulscan?

Projects with overlapping indexed features include: dependency-check/dependencycheck — DependencyCheck is a software composition analysis tool that identifies the third-party libraries a project depends… wpscanteam/wpscan — WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress… google/tsunami-security-scanner — Tsunami Security Scanner is a network vulnerability scanner and security auditor designed to identify high-severity… owasp/nettacker — Nettacker is an automated penetration testing framework designed to orchestrate reconnaissance, port scanning, and… sensepost/gowitness — Gowitness is a system for rendering web interfaces at scale to capture visual snapshots, HTTP metadata, and network… xmirrorsecurity/opensca-cli — OpenSCA-cli is an open-source software composition analysis tool and vulnerability management command-line interface…