owasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

api-securityattack-surfacescrystaldevsecopsendpointshacktoberfestowaspowasp-noirpentestingsecurity

License & maintenance

MIT is a permissive license: free to use commercially with attribution.

Last code push today.

	Repository	Stars	Language	License	Activity
1	KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploit	★ 49.1k	TypeScript	AGPL-3.0	Active
2	bee-san/RustScan🤖 The Modern Port Scanner 🤖	★ 20.6k	Rust	GPL-3.0	Active
3	OWASP/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.	★ 10.1k	CSS	CC-BY-SA-4.0	Active
4	infoslack/awesome-web-hackingA list of web application security	★ 7.3k	—	MIT	Active
5	sherlock-project/sherlockHunt down social media accounts by username across social networks	★ 94.4k	Python	MIT	Active
6	aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	★ 38.5k	Go	Apache-2.0	Active
7	OWASP/CheatSheetSeriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.	★ 33.7k	JavaScript	CC-BY-SA-4.0	Active
8	projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling	★ 32.1k	Go	MIT	Active