Top 8 Go vulnerability-scanner Projects

nuclei

17 17,234 9.8 Go

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Project mention: The 36 tools that SaaS can use to keep their product and data safe from criminal hackers (manual research) | /r/SaaS | 2023-05-22

Nuclei

vuls

3 10,671 8.8 Go

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
osv-scanner

10 5,825 9.6 Go

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
afrog

1 2,819 9.7 Go

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Project mention: Afrog explained for bug bounty hunters | dev.to | 2023-12-28

crawlergo

1 2,746 2.6 Go

A powerful browser crawler for web vulnerability scanners

Project mention: Ethical Hacking Tool | /r/hackthebox | 2023-06-27

Terrapin-Scanner

4 883 8.4 Go

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

Project mention: Tell HN: Ubiquiti APs likely vulnerable to Terrapin | news.ycombinator.com | 2024-03-14

For more details visit our website available at https://terrapin-attack.com

eraser

1 437 9.0 Go

🧹 Cleaning up images from Kubernetes nodes
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
archer

2 39 2.2 Go

Distributed network and vulnerability scanner (by taythebot)

Project mention: The Elasticsearch Rant | news.ycombinator.com | 2023-06-11

For the query string, you don’t have to implement your own DSL. Elasticsearch supports it out of the box. You could POST a JSON object to “/_search” but you can also do a GET with the “q” query parameter.
Documentation: https://www.elastic.co/guide/en/elasticsearch/reference/curr...
In the Golang library you can use the “Search.WithQuery” option. This means you don’t have to construct a JSON request body.
Here’s an example: https://github.com/taythebot/archer/blob/main/pkg/elasticsea...
The Elasticsearch Golang library is a real pain to use. It was meant as a low level library so they didn’t add any types. However they are currently working on a typed client! The documentation is a bit lacking but going through go.dev you can find all the methods you need. This still means you need to JSON decode the response, but it helps you build queries, which is a step up.
Typed Client: https://www.elastic.co/guide/en/elasticsearch/client/go-api/...

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).