資安週報Security Weekly 攻擊手法通報 × 資安工具Advisories × Tooling

資安工具庫Security tools

週報介紹過的工具會累積在這裡,可依用途篩選。Every tool featured in the weekly, filterable by category.

漏洞掃描Vulnerability scanning MIT

Nuclei

以 YAML 樣板驅動的漏洞掃描器,社群樣板庫覆蓋大量已知 CVE 與設定疏失。Template-driven vulnerability scanner with a large community library covering known CVEs and misconfigurations.

  • 漏洞掃描Vulnerability scanning
  • 紅隊Offensive
  • 資產盤點Attack surface
  • CI 整合CI-friendly
供應鏈安全Supply chain Apache-2.0

Trivy

一支指令掃遍容器映像、原始碼相依套件、IaC 設定與密鑰外洩。One command to scan container images, code dependencies, IaC configs, and leaked secrets.

  • 容器安全Container security
  • SBOMSBOM
  • CI 整合CI-friendly
  • 藍隊Defensive