#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
capture0x/aws-pentestAutomated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration…
iana-org/get-trust-anchorTool for fetching/refreshing DNS Root Zone trust anchors
sigstore/root-signingMaintains the TUF repository that securely delivers the Sigstore trust root (trusted_root.json) to clients, using keyholder threshold signing, KMS…
rtkwlf/wolf-toolsScans Windows, Linux, and macOS hosts for Java packages containing JndiLookup.class to detect Log4Shell (CVE-2021-44228, CVE-2021-45046) exposure and…
edtrackai/nextjs-supabase-stripe-security-checkerLocal static security scanner for Next.js, Supabase and Stripe apps: 24 AST-based checks for leaked keys, missing RLS and grants, unsafe webhooks.…
g4bri-3l3/hostbadgerRead-only Windows host hardening auditor in PowerShell with optional AI analysis
g4bri-3l3/idwolfRead-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings, attack…
tridents10/vader-pro-vdrAI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence…
abraxas/pfsense-bsnmpd-confpfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - bsnmpd syslocation
abraxas/pfsense-cp-maxprocperippfSense CE 2.9.0-DEVELOPMENT - High - Remote - Config injection - CP maxprocperip nginx
abraxas/pfsense-limiter-aqmpfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - limiter AQM newline
abraxas/pfsense-ntp-gps-fudgepfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - NTP GPS/PPS fudge
mceeomoba/apex-kev-change-deskOffline CISA KEV snapshot comparison for field-level change review. Free prototype, not a security assessment. AI-assisted development.
joda32/aditActive Directory recon and read-only security audit over ADWS (net.tcp/9389), in Go
roccoammon/active-directory-health-checkPowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…
abraxas/opnsense-ntp-gps-fudgeOPNsense 26.7.6 - High - Remote - Config line injection - NTP GPS fudge
abraxas/opnsense-tunables-loaderOPNsense 26.7.6 - High - Remote - Config line injection - tunables loader
abraxas/opnsense-wlan-wpa-lineOPNsense 26.7.6 - High - Remote - Config line injection - WLAN WPA identity
