#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
mateosec/ghostcatchDisables AJP connectors to remediate CVE-2020-1938!
alebedev87/gatekeeper-cve-2020-8554OPA Gatekeeper constraint policy that detects and prevents Kubernetes clusters from being vulnerable to CVE-2020-8554, enforcing secure configuration.
mebibite/springhoundCreated after the disclosure of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and…
axisops/cve-2021-44228log4j mitigation work
castro-ian/cve-2024-4573-mitigation-scriptDetects NTLM authentication status by checking LmCompatibilityLevel registry value to assess exposure to CVE-2024-43451 and mitigate credential relay…
lukepasek/log4jjndilookupremoveA simple script to remove Log4J JndiLookup.class from jars in a given directory, to temporarily protect from CVE-2021-45046 and CVE-2021-44228.
havoc10-sw/detect_polyfill_cve-2024-38537-Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.
ekamsinghwalia/mitigation-apache-cve-2021-41773-Mitigation/fix of CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache
dev0558/cve-2023-32243-detection-and-mitigation-in-wordpressEducational lab demonstrating detection and mitigation of CVE-2023-32243 privilege escalation in WordPress Essential Addons for Elementor, using…
rsalmond/cve-2021-34824reproducing an old istio bug
tobiass1402/cve-2021-3438Detection and remediation for CVE-2021-3438 with Powershell
nihal1306/gogsCVE-2014-8682
ekamsinghwalia/detection-and-mitigation-for-cve-2022-2639Shell script to detect and mitigate CVE-2022-2639 in Open vSwitch kernel module. Checks module status, provides remediation steps, and recommends…
hh-hunter/nacos-cve-2021-29441Exploit for CVE-2021-29441 targeting Nacos authentication bypass via default credentials, enabling unauthorized access and configuration manipulation.
piranhap/cve-2013-3900_remediation_powershellScript to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment.
first-roman/sprig-mvc-demo-patchThis demo application partially covers the vulnerability CVE-2024-38828
killerbees19/cve-2024-24760mailcow: Docker Container Exposure to Local Network
infosec4fun/cve-2020-10132CVE-2020-10132 - SearchBlox product before V-9.1 is vulnerable to CORS misconfiguration.
