#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
atiilla/cve-2026-42897CVE-2026-42897 - Exchange Health Checker blind spot: outbound IIS URL Rewrite rules silently ignored, making EOMT mitigations invisible in diagnostic…
ndaal_open_source/ndaal_public_auditdBest-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and…
tridents10/vader-pro-vdrAI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence…
sreckoskocilic/envocabularyTrace every shell environment variable to its exact file and line origin. Audit shell configs for dead entries, duplicates, and orphaned files across…
jp.louvel/ncstatuscheckMonitoring centralisé pour instances Nextcloud multiples
tanmayshahane/kyubisweepA lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum…
hwdsl2/setup-ipsec-vpnAutomated IPsec VPN server setup with IPsec/L2TP, Cisco IPsec, and IKEv2 support. Includes helper scripts for user and certificate management, and…
paddlingcode/cve-2022-30190CVE-2022-30190 remediation via removal of ms-msdt from Windows registry
ajf8729/blacklotusBlackLotus aka CVE-2023-24932 Detection/Remediation Scripts for Intune, ConfigMgr, and generic use
ermensonx/sudotimewarp-cve-2026-96512-Reproduction and PoC scripts for CVE-2026-96512 (SudoTimeWarp), where the caller's TZ shifts sudoers NOTBEFORE/NOTAFTER windows, plus mitigation…
xiaoqimikko/tomcat-check查出 Spring Boot 内嵌 Tomcat 的真实版本(pom 里没有),并对每条 2026 年 CVE 同时给出 ASF 官方评级与 GitHub 评级、触发条件、以及这条会不会进 Dependabot 告警 CVE-2026-41293
sorami-consulting-au/ai-kubernetes-helm-chart-securityEvidence and data for the Sorami technical report on security defaults of 15 AI serving, vector database and MCP Helm charts on Kubernetes.
suuhm/cve-2026-21509-handlerPowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office…
ehabhussein/snmpvlanSNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…
emrekybs/hawkopsecOne-tap Linux OPSEC hardening & anonymity toolkit
aoripus-ltd/januscape-hotfixComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel…
sofire/polkit-0.96-cve-2021-4034centos 6.10 rpm for fix polkit CVE-2021-4034; centos 6.10的rpm包，修复CVE-2021-4034 漏洞
furkankayapinar/cve-2026-94127Read-only defensive detector for CVE-2026-94127 in F5 BIG-IP APM. Fingerprints hosts, checks versions via iControl REST, and verifies OAuth…
