Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Open Source Vulnerability Management Platform

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory ext…

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Automated NoSQL database enumeration and web application exploitation tool.

Find leaked secrets via github search

Source Code Security Audit (源代码安全审计)

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

SSH-MITM - ssh audits made simple

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

secator - the pentester's swiss knife

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

pentest framework