#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
dev-2null/adcollectorA lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
kubesphere/kubeeyeCloud-native Kubernetes cluster inspection tool that detects application misconfigurations, unhealthy components, and node problems using custom OPA,…
yamato-security/enablewindowslogsettingsDocumentation and scripts to properly enable Windows event logs.
graphenex/graphenexAutomated System Hardening Framework
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
sektioneins/pccAutomated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…
dev-sec/puppet-os-hardeningThis puppet module provides numerous security-related configurations, providing all-round base protection.
microsoft/secureboot_objectsMicrosoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…
microsoft/routeros-scannerTool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.
phillips321/adauditPowershell script to do domain auditing automation
selinuxproject/selinux-notebookComprehensive open-source book on SELinux covering kernel components, userspace libraries, policy toolchain, and policy language. Includes build…
danwin/hostingAutomated Tor-based shared web hosting server with PHP multi-version support, email routing, auto-scaling Tor instances, and built-in security…
azuread/azureadassessmentTooling for assessing an Azure AD tenant state and configuration
zyn3rgy/ldaprelayscanCheck for LDAP protections regarding the relay of NTLM authentication
legit-labs/legitifyDetect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
duggytuxy/syswardenHost-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…
dowjones/hammerDow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
