#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
rgielen/struts1filterA request parameter filter solution for Struts 1 CVE-2014-0114 based on the work of Alvaro Munoz and the HP Fortify team
ioactive/jdwp-shellifierExploitation script for exposed Java Debug Wire Protocol (JDWP) services, enabling pentesters to inject Java code and execute arbitrary OS commands…
gforresu/springpathtraversalString MVC Framework Path-Traversal proof of concept. CVE-2014-3625
meersjo/ansible-mysql-cve-2016-6662Simple ansible playbook to patch mysql servers against CVE-2016-6662
mogwaisec/mjetMogwai Java Management Extensions (JMX) Exploitation Toolkit
jackdpeterson/imagick_secure_puppetPuppet module to harden ImageMagick policy.xml against CVE-2016-3714 by restricting dangerous image processing directives.
raffaele-forte/climberCheck UNIX/Linux systems for privilege escalation
1n3/xsstracerA small python script to check for Cross-Site Tracing (XST)
1n3/supermicro-password-scannerSupermicro IPMI/BMC Cleartext Password Scanner
nccgroup/windowsdaclenumprojectA collection of tools to enumerate and analyse Windows DACLs
andresriancho/nimbostratus-targetThis repository holds a target infrastructure you can use for running the nimbostratus tools.
jhs/audit_couchdbDetect security issues in an Apache CouchDB server
gursev/flash-xdomain-xploitActionScript Proof of Concept to perform cross-domain reads
iriscouch/audit_couchdbDetect security issues, large or small, in a CouchDB server
nzkoz/bigdecimal-segfault-fixProvides a quick workaround for the segfault bug in Ruby (CVE-2009-1904)
