Tools
cve-bin-tool
ossf/cve-bin-tool
A command-line scanner that finds known CVEs in binaries and SBOMs by detecting bundled components, generating reports and integrating with CI pipelines.
Topics
Related projects
dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
kics2.7kKICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.
is-website-vulnerable2kis-website-vulnerable is a Node.js CLI that inspects a website's frontend JavaScript libraries and reports publicly known vulnerabilities, usable locally or in CI pipelines.
noir1.5kOWASP Noir is a static analysis CLI that extracts endpoints, parameters and shadow APIs from source code and exports them for human auditors, LLM auditors or DAST scanners.- DevSecOps2.2kDevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.