OpenVAS is a vulnerability scanner that appears to be open source.
Metasploit is another that I think is free and might be open source.
this post was submitted on 12 Feb 2026
14 points (100.0% liked)
Selfhosted
56297 readers
992 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
-
No low-effort posts. This is subjective and will largely be determined by the community member reports.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
OpenVAS is a vulnerability scanner. Metasploit is a penetration testing framework.
First one does what OP wants. Second one less so, and is more hands on.
See dirbuster for automated dumb searching of web directories, gives you response codes to tell you if a page is accessible to the outside world. See nuclei which I haven't used myself but seems to get good reviews for automated vuln scanning from the command line - has nice output and seems simple to use.
They're both easy to use and install on something like Kali Linux.
Instead of trying to automatically scan your environment, it's probably better to figure out how to automatically update applications first. CVE's eventually get patched.
There are variouse alternatives to see what ports are open. Usually they autyo scan just the ip you come from, to avoid being used to scan a potential target.
If you want more, just use Greenbone. Run it twice. Once from another IP just to know how the world sees you. One time internal network and add accounts to greenbone allowing it to login and check further.
If you run linux, then Lynis is awesome to verify your config
If you run linux, then Lynis is awesome to verify your config
+1 for Lynis if you are scanning for vulnerabilities. Some of the recommendations won't really apply to a homelab, but it is pretty comprehensive. A great way to harden your server(s).
Are you just wanting to scan certs? LetsEncrypted partnered with RedSift to offload their cert expiration checks. It's free: https://iam.redsift.cloud/signup?product=cert-letsencrypt. Uptime Kuma will also track your certs too.