V

vulnerability scanning

A WordPress plugin that blocks 404 scanners at the Cloudflare edge using IP Access Rules. Works on every Cloudflare plan including Free; authenticates with a scoped API token kept in wp-config.php.

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

Open-source scanner called FleaMarket that finds exposed API keys in fresh GitHub repos. In a recent scan, it discovered live Google/Gemini keys in public .env files

Hoppr-Cop is CLI and Hoppr Plugin that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials (SBOM) by aggregating data from multiple vulnerability databases.

CheckWP is a production-ready CLI tool for detecting malware, backdoors, adware, and security vulnerabilities in WordPress plugins. Works fully offline with 50+ built-in detection rules, with optional AI-enhanced analysis via any OpenAI-compatible API. CheckWP is the driving force behind the security scanner CheckWP.org.

Scan projects for vulnerabilities with osv-scanner.

Offensive security tool for printer pentesting

This repository demonstrates how to implement a secure CI/CD pipeline using GitLab and Google Cloud Platform, focusing on:

🔐 Workload Identity Federation for secure authentication 📦 Artifact Registry for container images 🛡️ Binary Authorization for image signing 🔍 Vulnerability scanning 🚀 Progressive delivery with Cloud Deploy

cdt-pma, part of the crypto-detection-tool project, scans installed packages via apt, identifying insecure ones and reporting potential dependencies affected for comprehensive vulnerability assessment

Ruby library for communicating with the tenable.io API