Topics / #vulnerability-detection

Vulnerability-detection projects on GitHub

Detecting and reporting vulnerabilities in systems and containers.

As of , the most-starred Vulnerability-detection projects on GitHub are trivy (38.5K stars), nuclei (32.1K stars) and wazuh (17.3K stars). GitHub.Locker tracks 11 Vulnerability-detection repositories with 166.8K stars combined. The fastest-growing on October 16 was wifit3, with +26 stars in a day.

11Projects
166.8KStars in total
+122Stars in a day
Browse in the catalog →github.com/topics/vulnerability-detection ↗

Hot right now

Most stars gained in a day · Oct 16

+26

wifit3

derv82/wifit3 · ★ 2.4K

wifit3 is a standalone Wi-Fi security auditing tool that scans networks, captures WPA/WPA2 handshakes, and exploits WPS/WEP weaknesses using a supported USB Wi-Fi adapter, without relying on aircrack-ng or OS kernel drivers.

+23

skills

trailofbits/skills · ★ 7.6K

This is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.

+22

trivy

aquasecurity/trivy · ★ 38.5K

Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

+21

nuclei

projectdiscovery/nuclei · ★ 32.1K

A fast, open-source vulnerability scanner that runs YAML-based templates to find security issues in applications, APIs, networks, DNS and cloud configurations. Its checks come from a large global security community.

The all-time top

11 projects · by stars

  1. #1 · aquasecurity/trivy

    trivy

    Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

    38.5K
  2. #2 · projectdiscovery/nuclei

    nuclei

    A fast, open-source vulnerability scanner that runs YAML-based templates to find security issues in applications, APIs, networks, DNS and cloud configurations. Its checks come from a large global security community.

    32.1K
  3. #3 · wazuh/wazuh

    wazuh

    Wazuh is a free, open source security platform (XDR and SIEM) for threat prevention, detection and response across on-premises, virtualized, containerized and cloud workloads.

    17.3K
  1. 4

    lynis

    16.5KCISOfy/lynis · Shell

    Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

  2. 5

    nuclei-templates

    13.1Kprojectdiscovery/nuclei-templates · JavaScript

    This is a community-curated collection of over 11,000 detection templates for the Nuclei vulnerability scanner, covering CVEs, misconfigurations, exposed panels, and other security issues.

  3. 6

    oss-fuzz

    12.7Kgoogle/oss-fuzz · Shell

    OSS-Fuzz is Google's free continuous fuzzing service for open source software: it runs guided fuzzing nonstop to surface security vulnerabilities and stability bugs before attackers do.

  4. 7

    vuls

    12.3Kfuture-architect/vuls · Go

    Vuls is an open-source, agent-less vulnerability scanner written in Go. It automatically detects vulnerabilities affecting your servers and can generate reports on a regular basis, for example via CRON.

  5. 8

    kubescape

    11.8Kkubescape/kubescape · Go

    Kubescape is an open-source Kubernetes security platform that scans clusters, YAML files, Helm charts, and container images for misconfigurations and vulnerabilities, covering the whole lifecycle from development to runtime.

  6. 9

    skills

    7.6Ktrailofbits/skills · Python

    This is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.

  7. 10

    mantis

    2.5Kgoogle/mantis · Python

    Mantis is a toolkit of skills plus a reference agent harness (built on Google's ADK) that lets AI coding agents autonomously find, reproduce, triage, and patch vulnerabilities in a codebase.

  8. 11

    wifit3

    2.4Kderv82/wifit3 · Python

    wifit3 is a standalone Wi-Fi security auditing tool that scans networks, captures WPA/WPA2 handshakes, and exploits WPS/WEP weaknesses using a supported USB Wi-Fi adapter, without relying on aircrack-ng or OS kernel drivers.

Often tagged together