Vulnerability Management
159 tools and resources
FEATURED
Feature Your Cybersecurity Product
Showcase your innovative cybersecurity solution to our dedicated audience of security professionals.
Boost Your VisibilityNEW
A guide to brute forcing DVWA on the high security level with anti-CSRF tokens
A non-profit organization focused on improving the security of software through resources and training.
Advanced vulnerability assessment tool for gaining visibility and preventing cyber attacks.
A vulnerability assessment and management tool that uses patented technology to accurately identify vulnerabilities and prioritize them by risk.
Amass by OWASP performs comprehensive attack surface mapping and asset discovery.
An OSINT tool that generates username lists for companies on LinkedIn for social engineering attacks or security testing purposes.
A categorized collection of bug bounty write-ups for various vulnerabilities.
A LinkedIn reconnaissance tool for gathering information about companies and individuals on the platform.
Dnscan is a DNS reconnaissance tool that performs DNS scans, DNS cache snooping, and DNS amplification attack detection.
A BloodHoundAD Report Engine for Security Teams to identify Active Directory security vulnerabilities and harden common configuration vulnerabilities and oversights.
List of publicly disclosed vulnerabilities with security filters and detailed advisories.
tfsec is being replaced by Trivy, a more comprehensive open-source security solution
An open source project for static analysis of vulnerabilities in application containers
Simple script to check a domain's email protections and identify vulnerabilities.
A comprehensive database of exploits and vulnerabilities for researchers and professionals
A tool for static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers
Weekly security newsletter with advisories from major software vendors
Web-application vulnerability scanner with extensive coverage of security testing modules.
OCaml bindings to the YARA scanning engine for integrating YARA scanning capabilities into OCaml projects
A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.
Fuzzapi is a Rails application with a user-friendly UI for API_Fuzzer gem and Docker setup.