#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
traceforce/mcp-xrayUnified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…
nicolonsky/conditionalaccessdocumentationMicrosoft Entra Conditional Access Documentation with PowerShell
m14r41/scan4secretsFind credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…
ustayready/cloudgptVulnerability scanner for AWS customer managed policies using ChatGPT
slowql/slowqlNext-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
tuskira/ai-agent-gatewayOpen-source gateway that secures, governs, and observes AI agents' MCP tool calls and LLM traffic, with API-key authentication and an admin console…
boreas37/cve-2026-64638-poc-xss2shell-XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
elcodigok/wphardeningFortify the security of any WordPress installation.
ibm-security/ibmsecurityIdempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.
dylandavis1/dscourierProof-of-concept tool leveraging WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries, enabling EDR bypass for…
laokoon-security/cortex-xdr-config-extractorParses Cortex XDR agent database lock files to extract agent settings, uninstall password hash/salt, and security exclusions for red team assessments…
guilherme-grimm/graph-gosimply nodes and graphs
kvesta/vestaA static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing
tindersec/gh-workflow-auditorScript to audit GitHub Action Workflow files for potential vulnerabilities.
inceptionstack/lowkeyDeploy self-hosted AI coding agents (OpenClaw, Claude Code, Codex) into your AWS account with CloudFormation, IAM profiles, and sandbox isolation for…
tenable/escalategptAn AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.
blacksnufkin/invoke-dumpmdeconfigPowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )
