#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
ehabhussein/snmpvlanSNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…
emrekybs/hawkopsecOne-tap Linux OPSEC hardening & anonymity toolkit
aoripus-ltd/januscape-hotfixComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel…
sofire/polkit-0.96-cve-2021-4034centos 6.10 rpm for fix polkit CVE-2021-4034; centos 6.10的rpm包，修复CVE-2021-4034 漏洞
furkankayapinar/cve-2026-94127Read-only defensive detector for CVE-2026-94127 in F5 BIG-IP APM. Fingerprints hosts, checks versions via iControl REST, and verifies OAuth…
ncsc-fi/tiukuTiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based…
oscerd/cve-2026-85300Runnable Spring Boot and Quarkus reproducer for CVE-2026-85300, demonstrating camel-pqc writing private keys with permissive umask-derived file…
vighnesh91/cloudgarrisonOffline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs…
abraxas/pfsense-limiter-aqmpfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - limiter AQM newline
abraxas/opnsense-wlan-wpa-lineOPNsense 26.7.6 - High - Remote - Config line injection - WLAN WPA identity
abraxas/opnsense-ntp-gps-fudgeOPNsense 26.7.6 - High - Remote - Config line injection - NTP GPS fudge
oscerd/cve-2026-85313Runnable Spring Boot proof-of-concept reproducing CVE-2026-85313, where Apache Camel camel-jetty enableCORS reflects any origin with credentials,…
pbxqdown/portclueExplain why a Linux TCP port may or may not be reachable
9pings/fad-checkerBuildless dependency auditor that scans 10 ecosystems offline, reporting CVEs prioritized by CISA KEV and EPSS, EOL packages, licenses, committed…
valtersit/wordpress-cve-scannerScan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT…
abraxas/pfsense-bsnmpd-confpfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - Config injection - bsnmpd syslocation
abraxas/pfsense-cp-maxprocperippfSense CE 2.9.0-DEVELOPMENT - High - Remote - Config injection - CP maxprocperip nginx
soufianecyber/quantum-safe-migrationEnterprise-grade toolkit to audit and migrate legacy infrastructure to hybrid post-quantum cryptography (PQC).
