Tools
packj
ossillate-inc/packj
Supply-chain security scanner that flags malicious and risky open-source dependencies via static and dynamic analysis.
Topics
Related projects
npq1.8kA CLI that audits npm packages before installation, checking vulnerabilities, age, popularity, install scripts and provenance to reduce supply-chain risk.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
wifiphisher15kWifiphisher is a rogue access point framework for red team engagements and Wi-Fi security testing. It performs Evil Twin, KARMA and known-beacon association attacks, then serves customizable phishing pages to capture credentials under controlled, authorized testing.
maltrail8.7kA malicious network traffic detection system that matches observed traffic against threat-intelligence trails and reports events through a web interface.
bandit8.4kA security linter from PyCQA that inspects Python code via AST and plugins to find common security issues and produce reports.