Alternatives and similar repositories for vuln-list:

Users that are interested in vuln-list are comparing it to the libraries listed below

• aquasecurity / vuln-list-update
  ☆183Updated last week
• facebookincubator / nvdtools
  A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)
  ☆460Updated last year
• aquasecurity / fanal
  Static Analysis Library for Containers
  ☆199Updated last year
• aquasecurity / trivy-db
  ☆261Updated last week
• aquasecurity / go-dep-parser
  Dependency Parser for Multiple Programming Languages
  ☆148Updated 10 months ago
• Metarget / awesome-cloud-native-security
  awesome resources about cloud native security 🐿
  ☆313Updated last year
• brompwnie / botb
  A container analysis and exploitation tool for pentesters and engineers.
  ☆665Updated last year
• CloudSecurityAlliance / gsd-database
  Global Security Database
  ☆314Updated 11 months ago
• google / vulncode-db
  Vulncode-DB project
  ☆577Updated 3 years ago
• vulsio / go-exploitdb
  Tool for searching Exploits from Exploit Databases, etc.
  ☆278Updated this week
• aquasecurity / defsec
  Trivy's misconfiguration scanning engine
  ☆218Updated 2 months ago
• aquasecurity / linux-bench
  Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark
  ☆170Updated 2 months ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆836Updated last year
• aquasecurity / docker-bench
  Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark
  ☆216Updated 2 months ago
• aquasecurity / harbor-scanner-trivy
  Use Trivy as a plug-in vulnerability scanner in the Harbor registry
  ☆221Updated 7 months ago
• vulsio / go-cve-dictionary
  Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.
  ☆388Updated this week
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆198Updated last week
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆114Updated this week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆114Updated last month
• OWASP-Benchmark / BenchmarkJava
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…
  ☆703Updated last week
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆561Updated 2 weeks ago
• thinksabin / DTrackAuditor
  DTrackAuditor is the python script to faciliate usage of DependencyTrack in the CI.
  ☆11Updated 2 months ago
• dev-sec / cis-docker-benchmark
  CIS Docker Benchmark - InSpec Profile
  ☆506Updated last year
• cyberark / kubesploit
  Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized en…
  ☆1,160Updated 2 months ago
• githubsatelliteworkshops / codeql
  GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.
  ☆210Updated 6 months ago
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,587Updated 2 years ago
• microsoft / WAFBench
  WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and …
  ☆108Updated 2 years ago
• raesene / kube_security_lab
  ☆243Updated 7 months ago
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated 5 months ago
• sjvermeu / cvechecker
  Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
  ☆263Updated last year