#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
affolter-engineering/hvtRust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…
keysau/get-log4j-windows.ps1Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228
heroku/heroku-cve-2013-0333Scans Heroku applications for a critical Rails remote code execution vulnerability (CVE-2013-0333) and identifies unpatched instances requiring…
leonlai-tw/php-eol-cve-2026-109618-109619Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…
haydenjames/dirty-frag-checkRead-only checker for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) Linux kernel local-root vulns
lucab85/ansible-role-log4shellAnsible playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 for Log4Shell (CVE-2021-44228).
imxur/wordpress-cve-2026-63030-analysisTechnical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.
mahfuzreham/ovswrap-cve-2026-64531-mitigation-toolShell script that detects vulnerable Open vSwitch kernel modules, blocks automatic loading, removes the affected module, and verifies mitigation…
mrk336/from-foothold-to-domain-admin-weaponizing-cve-2025-54918-in-real-world-devopsSimulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI/CD hardening.…
vvpoglazov/cve-2024-41110-checkerParallel SSH-based scanner that detects CVE-2024-41110 in Docker installations, identifies vulnerable versions and AuthZ plugins, and generates a…
r3dcl1ff/cve-2022-41040mitigation script for MS Exchange server vuln
snailsploit/cve-2026-3288Walkthrough: ingress-nginx Configuration Injection via rewrite-target Annotation
owasp/trisuella-aidlca-frameworkPolicy-governed LLMSecOps framework providing AST-based SAST, secret scanning, supply-chain and multi-cloud CSPM checks, AI-BoM generation, and CI/CD…
shahidmallaofficial/cpanel-cve-2026-41940-fixOne-shot detection and remediation for cPanel/WHM servers compromised via CVE-2026-41940, including IOC checks, malware cleanup, C2 blocking, and…
mahfuzreham/cpanel-cve-2026-41940cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script
macminivault/ntpupdatesnowleopardUpdates OS X 10.6.8 NTP to include patch for CVE-2014-9295
xsanflip/cve-2026-31431-patchBash script to mitigate and patch CVE-2026-31431 (Copy Fail), a Linux kernel LPE, by blacklisting AF_ALG modules, flushing page cache, and updating…
nccgroup/secretscrubProcesses SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…
