#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
derailed/popeye👀 A Kubernetes cluster resource sanitizer
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
aquasecurity/trivy-operatorKubernetes-native security operator that automates vulnerability scanning, configuration auditing, secret detection, RBAC analysis, and compliance…
sa7mon/s3scannerScan for misconfigured S3 buckets across S3-compatible APIs!
subat0mik/misconfiguration-managerMisconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening…
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
th3xace/sudo_killerA tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific…
sleventyeleven/linuxprivcheckerLocal Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…
jakehildreth/locksmithA small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
zegl/kube-scoreKubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…
bridgecrewio/terragoatIntentionally vulnerable Terraform infrastructure for learning cloud misconfiguration detection and DevSecOps practices across AWS, Azure, and GCP.
alessandroz/berootPrivilege Escalation Project - Windows / Linux / Mac
hardentools/hardentoolsHardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
silverhack/monkey365PowerShell-based security assessment framework for Microsoft 365, Azure, and Entra ID. Scans for misconfigurations, CIS benchmark compliance, and…
evotecit/gpozaurrGroup Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in…
projectdiscovery/tlsxFast and configurable TLS grabber focused on TLS based data collection.
emadshanab/nuclei-templates-collectionNuclei Templates Collection
