Popular GitHub Repositories for Vulnerability Scanners

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Test your prompts, agents, and RAGs. Red teaming, pentesting, and vulnerability scanning for LLMs. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration.

the LLM vulnerability scanner

Zero shot vulnerability discovery using LLMs

Agentic LLM Vulnerability Scanner / AI red teaming kit ?

Quark Agent - Your AI-powered Android APK Analyst

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

A script for credentials-based attack surface enumeration and general reconnaissance of massive networks

ChatWithBinary: Advanced AI-powered binary analysis tool leveraging OpenAI's LangChain technology, revolutionizing CTF Pwners' experience in binary file interpretation and vulnerability detection.

AI engine for smart contract audit

Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By following this approach, a security researcher will hopefully identify interesting RPC services in such a time that would take a manual approach significantly more.

基于 AI 的代码安全审计工具，支持多种编程语言的代码分析，可以帮助开发者快速发现代码中的潜在安全漏洞。支持DeepSeek-R1，ChatGPT-4o等多种大模型。

AIShield Watchtower: Dive Deep into AI's Secrets! ? Open-source tool by AIShield for AI model insights & vulnerability scans. Secure your AI supply chain today! ????

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Fingerprint-aware TLS reverse proxy: allow, deny, route, or deceive traffic using JA3, JA4 (+QUIC), JA4H, HTTP/2 fingerprints, and request metadata. Finch outsmarts bad traffic—blocking noise with high-fidelity fingerprints, tarpitting scanners, and dynamically deceiving attackers in real time.

vulnerability detection in python source code with LSTM networks

Smart Contract Vulnerability Detection Using Graph Neural Networks (IJCAI-20 Accepted)