Tools
gau
lc/gau
gau (getallurls) is a command-line tool that fetches known URLs for a domain from AlienVault OTX, the Wayback Machine, Common Crawl and URLScan, making it useful for reconnaissance and attack-surface mapping.
Topics
Related projects
osquery23.8kA SQL-powered operating system instrumentation framework that exposes processes, network connections, and other host state as queryable tables for security monitoring.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.
dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
gatekeeper4.3kAn OPA-based Kubernetes policy controller that validates and mutates resources at admission time through constraint templates and CRDs, enforcing cluster-wide security and compliance rules.
kics2.7kKICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.