cve-scanner 开源项目推荐（65 个）

projectdiscovery /nuclei

Nuclei 是一款快速、可定制的漏洞扫描器，由全球安全社区驱动，基于简单的 YAML DSL 构建，支持协作应对互联网上的热门漏洞。它可帮助你在应用程序、API、网络、DNS 和云配置中发现漏洞。

vmfunc /sif

the blazing-fast pentesting suite.

meliht /Mr.SIP

SIP Security Assessment Framework for VoIP Pentesters. Presented at DEFCON, BlackHat & Offzone.

mrhenrike /MikrotikAPI-BF

已弃用——已并入 EmbedXPL v5.0.0。参见 https://github.com/mrhenrike/EmbedXPL-Forge

miladrezanezhad /web-security-scanner-pro

Advanced web security scanner with 49 modules, evasion engine, and CVE database.

TheStingR /CVE-2025-68613-POC

Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes detection tools, full exploit, and remediation guidance.

AbdaullahAG /ThreatLens

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan, AbuseIPDB.

a11mut3d /FullMute

FullMute Scanner is an advanced open-source tool for comprehensive web security scanning and vulnerability detection, featuring both a command-line interface (CLI) and a web interface.

jenkinsci /nuclei-plugin

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

srkgupta /cent-nuclei-templates

通过 cent 工具生成的 Cent Nuclei 模板。

reverseroom /vulecc-core

VULECC is the pioneer in Next-Generation Web Application Vulnerability Scanning technology, enabling businesses to proactively probe their web assets to identify and combat the most intricate vulnerabilities.

AjayBThorat-20 /devcompass

CLI dependency health checker for Node.js/npm: CVE scanning (OSV + NVD), license conflicts, unused deps, safe auto-fix with rollback, and optional AI-powered recommendations. Free complement to npm audit & Dependabot.

theghostshinobi /CVE-Matcher

🔍 Automated CVE scanner with 177K+ vulnerabilities database. Fast async HTTP fingerprinting, technology detection, and CVE matching for bug bounty & pentesting. Includes 403 bypass tools. Auto-updates from NVD feeds. Perfect for security researchers and ethical hackers.

T-Onix /Snare

Automated web technology fingerprinting & CVE discovery engine for hunters/red-teamers with Great UI

thecosmicexplorer /tools

Daily CVE scanners and offensive security tools for bug bounty & red team — one new tool pushed every day

zencefilefendi /dedekorkut

Async ag tarama ve istihbarat platformu (Python). Plugin mimarisi, HTTP redirect chain takibi, TLS sertifika otopsisi, DNS recon, harici CVE imza DB, JSON/CSV/HTML cikti, IPv6, stealth modu ve Ghost Protocol pasif sniffing.

sebastianspicker /rootstock-macos

macOS security analysis: local collection, modeled attack paths, scoped CVE scans, and offline incident response.

brammittendorff /linux-guardian

Lightning-fast Linux security scanner finds real threats in seconds, not hours. Cryptominers, CVEs, rootkits, memory threats, network attacks. Single binary, 100% local.

dineshkrishna9999 /firsttoknow

🔔 Stop being the last to know. AI agent that tracks YOUR stack and briefs you like a CTO.

C00LN3T /Spring4Shell

A vulnerability scanner and exploitation framework targeting Spring, GraphQL, and React Server Components (RSC) stacks. Features dynamic WAF evasion, passive/active auditing, Out-of-Band (OOB) verification, and multi-format enterprise reporting. Built for security researchers and authorized penetration testers.