渗透测试

mitmproxy / mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

rapid7 / metasploit-framework

Metasploit Framework

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

aquasecurity / trivy

一款全方位开源安全扫描器，面向容器镜像、Kubernetes、代码仓库、虚拟机和文件系统，可检测已知漏洞（CVE）、配置错误、敏感信息泄露及许可证合规问题，并支持 SBOM 生成、VEX 管理和 GitHub Actions 等 CI/CD 集成。

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

hashcat / hashcat

World's fastest and most advanced password recovery utility

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com