#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
maxwitat/cve-2023-36884-scripts-for-intune-remediation-sccm-compliance-baselineThe remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection…
ivankovic/stop-botsAutomate stopping bad bots from accessing your server
contrastsecurity/contrastSAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…
aaronfay/cve-2015-0235-testAnsible playbook to check vulnerability for CVE-2015-0235
ibondarenko1/azure-sentinel-detection-engineering9 MITRE ATT&CK-mapped KQL detections on a live Microsoft Sentinel + Defender XDR environment (control-plane, endpoint, identity), with a PR-gated…
claranet/ansible-role-log4shellAnsible role to detect Log4Shell (CVE-2021-44228) by scanning filesystem and open files for vulnerable JAR/WAR files, reporting version and…
tayyabt/trustlockA Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your…
eduardolat/authkeysync🔐 Lightweight CLI utility designed to synchronize SSH public keys from remote URLs into local authorized_keys files
gradiant/faroFARO - Document Sensitivity Detector
ake13-art/secfescLightweight security state inspector for Linux — bridging the gap between pretty fetch tools and heavy-duty audit frameworks.
boxed-dev/vibe-coding-securityPre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
synacktiv/eippEntra ID Password Protection Banned Password Lists
r3drun3/postfetchlike fastfetch but for security and privacy.
jas502n/unauthorized-tools未授权批量检测脚本
cspf-founder/api-scanner-dockerAutomated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …
corelight/corelight-ansible-rolesCorelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, Suricata and…
roddhjav/apparmor.dComprehensive set of over 1500 AppArmor profiles to confine Linux system processes, desktops, and services, with support for multiple distributions…
