#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
affolter-engineering/hvtRust CLI that probes HTTP methods (including WebDAV and DeltaV verbs) against a target URL to surface verb tampering, access-control bypasses, and…
0xby7eme/windows-lpe-auditorA small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI
jakehildreth/locksmith2An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers
toxy4ny/php2shell-checkerRead-only PHP2Shell package checker for Debian 12/13 (CVE-2026-109618, CVE-2026-109619).
nt2dev/cve-2026-36213-pocCVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation
g4bri-3l3/hostbadgerWindows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI analysis
g4bri-3l3/idwolfRead-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings, attack…
abraxas/openmeetings-backup-config-pathApache OpenMeetings 9.1.0 - High - Remote - File write leftover - ADMIN_BACKUP import skips Path.of on Type.PATH
abraxas/pfsense-config-readonly-restorepfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install
abraxas/spark-rest-auth-bypassApache Spark 4.2.0 - High - Remote - Privilege leftover - standalone REST ignores spark.authenticate
legit-labs/gh-legitifyGitHub CLI extension for running "legitify"
abraxas/sonic-gnmi-noauthDocuments and reproduces a fail-open authentication flaw in SONiC gNMI where an empty UserAuth map allows unauthenticated gNMI Set and gNOI writes,…
abraxas/kafka-connect-filestream-winKafka Connect 4.3.1 - High - Windows FileStream classpath leftover - unauth file read/write
abraxas/signal-server-dropwizard-adminSignal-Server v20261007.0.0 - High - Remote - Privilege leftover - unauth Dropwizard admin :8081
vulnz/sastFree offline SAST engine for CI/CD: AST and cross-file taint analysis, secret detection with live validation, SCA/CVE, IaC misconfiguration, and…
ye-ze-yu/epireal-benchRed-teaming benchmark and black-box attack framework for evaluating visual misinformation risks in commercial image generators, with 10k false-claim…
bsysop/servicenowScans ServiceNow instances for widget-simple-list plugin misconfigurations that expose data via the API, supporting single URLs, URL lists,…
gopasteverything/gpewebdefenderLightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.
