#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
goodwithtech/dockleContainer Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
archerysec/archerysecASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
dnsviz/dnsvizAnalyzes DNS delegation and DNSSEC security by probing resolvers and authoritative servers, then validating, diagnosing, and visualizing zone…
arthepsy/ssh-auditSSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
hardentools/hardentoolsHardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
trimstray/iptables-essentialsIptables Essentials: Common Firewall Rules and Commands.
silverhack/monkey365PowerShell-based security assessment framework for Microsoft 365, Azure, and Entra ID. Scans for misconfigurations, CIS benchmark compliance, and…
neo23x0/auditdBest Practice Auditd Configuration
evotecit/gpozaurrGroup Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in…
dev-sec/linux-baselineInSpec-based compliance profile for auditing Linux system hardening against security baselines, ensuring consistent configuration across…
renniepak/cspbypassCSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…
nozaq/terraform-aws-secure-baselineTerraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…
securityftw/cs-suiteCloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
lxc/incus-osImmutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…
bohops/ultimatewdacbypasslistA centralized resource for previously documented WDAC bypass techniques
hashgraph-online/hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at…
securitytemplates/sectemplatesOpen source templates you can use to bootstrap your security programs
