Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

Automated All-in-One OS Command Injection Exploitation Tool

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

AI-powered bug bounty hunting toolkit that works with or without subscription.

A Security Tool for Bug Bounty, Pentest and Red Teaming.

A high performance offensive security tool for reconnaissance and vulnerability scanning

EMBA - The firmware security analyzer

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

File upload vulnerability scanner and exploitation tool.

A powerful browser crawler for web vulnerability scanners

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

🆕 The Multi-Tool Web Vulnerability Scanner.

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.