滲透測試

rapid7 / metasploit-framework

Metasploit Framework

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

mitmproxy / mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

aquasecurity / trivy

Trivy 是一款全面且多功能的安全掃描器，可檢測容器映像、檔案系統、Git 倉庫、Kubernetes 叢集和虛擬機器映像中的漏洞、設定錯誤、敏感資訊及授權問題。

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

hashcat / hashcat

World's fastest and most advanced password recovery utility