#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended

An example detection and remediation policy.
glibc check and update in light of CVE-2015-7547

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

Playbooks 'Fix for CVE-2015-0235(GHOST)' running on Ansible

Chef cookbook to detect and patch the Shellshock (CVE-2014-7169) bash vulnerability across servers using automated configuration management.

CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 (AKA POODLE)

A collection of tools to enumerate and analyse Windows DACLs

Prometheus Firewall Analyzer

Ansible playbook to patch OpenSSL against CVE-2014-0291 and CVE-2015-0204 on Red Hat family servers, with automated service restart and verification.

SNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…

cookbook for update glibc. CVE-2015-0235(GHOST)

Ansible playbook to check vulnerability for CVE-2015-0235

Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability

A chef cookbook to test the GHOST vulnerability

Updates OS X 10.6.8 NTP to include patch for CVE-2014-9295

Patch openssl #heartbleed with ansible

Chef cookbook that detects and fails runs on servers vulnerable to CVE-2014-3566 (POODLE) by scanning specified SSL ports, serving as both a security…

Current development of SSLyze now takes place on a separate repository