Open Source Security Arsenal

A tool for secrets management, encryption as a service, and privileged access management

Hunt for security weaknesses in Kubernetes clusters

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The ZAP by Checkmarx Core project

In-depth attack surface mapping and asset discovery

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fast, simple, recursive content discovery tool written in Rust.

Directory/File, DNS and VHost busting tool written in Go

Fast web fuzzer written in Go

Nikto web server scanner

Automatic SQL injection and database takeover tool