#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
neelkotnis/azure-security-auditorCLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption
chusiang/cve-2016-3714.ansible.roleFix ImageMagick Command Injection (CVE-2016-3714) with Ansible.
fazmin/vcenter-server-workaround-script-cve-2021-44228Script - Workaround instructions to address CVE-2021-44228 in vCenter Server
gdraperi/remote-bitlocker-encryption-reportPowerShell script to mitigate CVE-2018-12038. The script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs a…
m0nk3ygod/cve-2026-34040-pocLab reproduction of CVE-2026-34040: bypasses Docker/Moby AuthZ plugins using oversized (>1MB) request bodies to create privileged containers with…
randomrobbiebf/s3-from-cspExtracts all S3 Buckets from CSP report headers and then tests for file upload vulns
mlazzarotto/copy-fail-cve-2026-31431-mitigation-ansible-playbookAn Ansible Playbook to mitigate the vulnerability CVE-2026-31431 on RHEL-based and Debian-based OSes.
boliu83/cve-2026-31431-algif-aead-remediatorKubernetes DaemonSet to detect and remediate CVE-2026-31431 (GHSA-2274-3hgr-wxv6) — algif_aead LPE via modprobe blacklist
paulorlima9/copyfail-fixQuick mitigation and patch script for CVE-2026-31431 (Copy Fail) on Ubuntu/Debian VPS
wavesman/cve-2026-31431-fleet-remediatorFleet-scale CVE-2026-31431 audit and remediation orchestrator for Linux hosts via SSH, with strict host-key verification and multi-format reporting.
selectel/mks-copy-fail-mitigationDaemonSet с реализацией временной меры для митигации уязвимости Copy Fail (CVE-2026-31431)
omerati/almalinux-fix-cve-2026-31431Automates kernel patching for CVE-2026-31431 and Dirty Frag, sets secure kernel as default in GRUB, and disables testing repo for production safety.
eximiait/cve-2026-31431Ansible playbooks to check and mitigate CVE-2026-31431 on Linux hosts, with scripts for local, remote, and containerized environments, including…
joltcan/ansible-role-cve-2026-31431Ansible role that applies and verifies the modprobe.d mitigation for CVE-2026-31431 by disabling the algif_aead kernel module, with safety checks for…
isagoakira/ghes-cve-scannerScans GitHub Enterprise Server instances for CVE-2026-3854 and CVE-2026-4821, providing version-based detection with batch scanning and multiple…
tailwindrg/cve-2026-0300-auditRead-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)
ruattd/cve-2026-31431GitHub Actions workflow to test if the runner is vulnerable to CVE-2026-31431, confirming root privileges in a controlled environment.
siyad01/agentboxOpen-source sandboxed runtime for AI agents — gVisor/Docker isolation, credential vault, immutable audit log. Built after CVE-2026-25253.
