Top 8 Python vulnerability-management Projects

faraday

8 4,600 5.0 Python

Open Source Vulnerability Management Platform (by infobyte)
rapidscan

1 1,650 4.1 Python

:new: The Multi-Tool Web Vulnerability Scanner.
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
osv.dev

19 1,403 9.7 Python

Open source vulnerability DB and triage service.

Project mention: Magika: AI powered fast and efficient file type identification | news.ycombinator.com | 2024-02-15

Is it safe to assume that hashing (1) every file on disk, or (2) any given file on disk at random, will yield random bits with uniform probability; and (3) why Argon2 instead of e.g. only two rounds of SHA256?
https://github.com/google/osv.dev/blob/master/README.md#usin... :
> We provide a Go based tool that will scan your dependencies, and check them against the OSV database for known vulnerabilities via the OSV API. ... With package metadata, not (a file hash, package) database that could be generated from OSV and the actual package files instead of their manifest of already-calculated checksums.
Might as well be heating a pool on the roof with all of this waste heat from hashing binaries build from code of unknown static and dynamic quality.
Add'l useful formats:
> Currently it is able to scan various lockfiles, debian docker containers, SPDX and CycloneDB SBOMs, and git repositories

Hunting-Queries-Detection-Rules

7 993 9.3 Python

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Project mention: Advanced Hunting queries every admin should use | /r/DefenderATP | 2023-05-29

CVE_Prioritizer

6 406 7.0 Python

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

Project mention: POST request to get CVE CVSS score | /r/AskNetsec | 2023-05-31

inthewilddb

7 187 3.3 Python

Hourly updated database of exploit and exploitation reports

Project mention: Where do you get your information regarding new vulnerabilities and security risks? | /r/sysadmin | 2023-05-09

intothewild - https://github.com/gmatuz/inthewilddb/blob/master/rss.xml

gvm-tools

2 153 8.9 Python

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
SSVC

1 103 9.2 Python

Stakeholder-Specific Vulnerability Categorization

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).