Topics / #scanner

Scanner projects on GitHub

Network and vulnerability scanning tools for discovering exposed services.

As of , the most-starred Scanner projects on GitHub are paperless-ngx (46.8K stars), zxing (34.2K stars) and gitleaks (30K stars). GitHub.Locker tracks 23 Scanner repositories with 347.8K stars combined. The fastest-growing on October 16 was gitleaks, with +60 stars in a day.

23Projects
347.8KStars in total
+222Stars in a day
Browse in the catalog →github.com/topics/scanner ↗

Hot right now

Most stars gained in a day · Oct 16

+60

gitleaks

gitleaks/gitleaks · ★ 30K

Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, or anything you pipe in via stdin.

+41

paperless-ngx

paperless-ngx/paperless-ngx · ★ 46.8K

Paperless-ngx is a self-hosted document management system that turns scanned physical documents into a searchable online archive, with OCR, indexing and archiving built in.

+15

semgrep

semgrep/semgrep · ★ 17.1K

Semgrep is a fast, open-source static analysis tool that scans source code to find bugs, security issues, and enforce coding standards using rules that look like ordinary code rather than abstract syntax trees or regex.

+15

nmap

nmap/nmap · ★ 13.8K

Nmap is the Network Mapper — a free, open-source tool for network discovery and security scanning. It finds live hosts, open ports, and the services running on them, from a single machine up to whole subnets.

The all-time top

23 projects · by stars

  1. #1 · paperless-ngx/paperless-ngx

    paperless-ngx

    Paperless-ngx is a self-hosted document management system that turns scanned physical documents into a searchable online archive, with OCR, indexing and archiving built in.

    46.8K
  2. #2 · zxing/zxing

    zxing

    ZXing ('Zebra Crossing') is an open-source, multi-format 1D/2D barcode image processing library written in Java, best known for QR Code scanning on Android, with ports to other languages.

    34.2K
  3. #3 · gitleaks/gitleaks

    gitleaks

    Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, or anything you pipe in via stdin.

    30K
  1. 4

    masscan

    26.1Krobertdavidgraham/masscan · C

    Masscan is an Internet-scale TCP port scanner that transmits SYN packets asynchronously and can scan the entire IPv4 Internet in under 5 minutes, sending up to 10 million packets per second from a single machine.

  2. 5

    RustScan

    20.6Kbee-san/RustScan · Rust

    RustScan is an open-source port scanner written in Rust: it finds open ports fast — all 65k ports in as little as 3 seconds — and has a scripting engine for Python, Lua and Shell.

  3. 6

    semgrep

    17.1Ksemgrep/semgrep · C

    Semgrep is a fast, open-source static analysis tool that scans source code to find bugs, security issues, and enforce coding standards using rules that look like ordinary code rather than abstract syntax trees or regex.

  4. 7

    ffuf

    16.9Kffuf/ffuf · Go

    ffuf is a fast web fuzzer written in Go — a command-line tool that sends many crafted requests to a target to discover directories, virtual hosts, and fuzzable GET/POST parameters.

  5. 8

    dirsearch

    15Kmaurosoria/dirsearch · Python

    Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

  6. 9

    fscan

    14.7Kshadow1ng/fscan · Go

    fscan is an open-source intranet scanner written in Go: one command runs an all-round internal-network audit — host discovery, port scanning, service identification, weak-password brute force and vulnerability detection.

  7. 10

    gobuster

    14.2KOJ/gobuster · Go

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

  8. 11

    nmap

    13.8Knmap/nmap · C

    Nmap is the Network Mapper — a free, open-source tool for network discovery and security scanning. It finds live hosts, open ports, and the services running on them, from a single machine up to whole subnets.

  9. 12

    routersploit

    13.3Kthreat9/routersploit · Python

    RouterSploit is an open-source exploitation framework built specifically for testing the security of embedded devices like routers.

  10. 13

    nuclei-templates

    13.1Kprojectdiscovery/nuclei-templates · JavaScript

    This is a community-curated collection of over 11,000 detection templates for the Nuclei vulnerability scanner, covering CVEs, misconfigurations, exposed panels, and other security issues.

  11. 14

    ESP32Marauder

    12.8Kjustcallmekoko/ESP32Marauder · C++

    ESP32 Marauder is a suite of offensive and defensive WiFi and Bluetooth tools that run as firmware on an ESP32 microcontroller, used for things like wardriving, scanning, and wireless security testing.

  12. 15

    Detect-It-Easy

    11.7Khorsicq/Detect-It-Easy · JavaScript

    Detect It Easy (DiE) is a cross-platform tool that identifies file types and inspects executables (PE, ELF, Mach-O) for malware analysts, reverse engineers, and cybersecurity researchers, combining signature-based detection with a deep heuristic engine.

  13. 16

    osv-scanner

    11.2Kgoogle/osv-scanner · Go

    OSV-Scanner is Google's open-source command-line vulnerability scanner: it checks your project's dependencies against OSV.dev, an open vulnerability database, and reports which known vulnerabilities affect you.

  14. 17

    nikto

    10.8Ksullo/nikto · Perl

    Nikto is an open-source web server scanner that checks servers for dangerous files, outdated software versions, and other common vulnerabilities.

  15. 18

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

  16. 19

    AI-Infra-Guard

    6.9KTencent/AI-Infra-Guard · Python

    AI-Infra-Guard (A.I.G) is a full-stack AI red teaming platform built by Tencent Zhuque Lab that scans AI agents, MCP servers, agent skills, and AI infrastructure components for security vulnerabilities, and evaluates LLMs against jailbreak attacks.

  17. 20

    bumblebee

    5.1Kperplexityai/bumblebee · Go

    Bumblebee is a read-only inventory collector that scans macOS and Linux developer machines for package, extension, and developer-tool metadata, so responders can quickly check if a machine matches a known supply-chain compromise advisory.

  18. 21

    WireTapper

    2.5Kh9zdev/WireTapper · HTML

    WireTapper is a wireless OSINT tool that passively discovers, maps, and analyzes nearby radio-based devices — Wi-Fi, Bluetooth, CCTV cameras, vehicles, IoT gadgets, and cell towers — without actively intruding on anything.

  19. 22

    quickscan

    289yoli-mi/quickscan · Rust

    QuickScan is a tiny Windows desktop app that sits in your system tray: hit a hotkey, drag a selection box over any QR code on screen, and it decodes it instantly so you can copy or open the result.

  20. 23

    geiger

    166Atomburstofficial/geiger · JavaScript

    Geiger is a read-only scanner for AI tooling: one command inventories every AI agent, harness, MCP server, plugin and AI extension on a machine and says in plain language what each one can touch.

Often tagged together