#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
mandiant/mandiant-azure-ad-investigatorRead-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…
mandiant/azure_workshopTerraform-deployable vulnerable-by-design Azure lab with realistic attack paths and common misconfigurations for practicing red teaming and security…
hlldz/dazzleupA tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.
domain-protect/domain-protectOWASP Domain Protect - prevent subdomain takeover
opencspm/opencspmOpen Cloud Security Posture Management Engine
jsa2/caopticsCA Optics - Azure AD Conditional Access Gap Analyzer
edoverflow/megplusAutomated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
reposaur/reposaurOpen source compliance tool for development platforms.
gravitational/cve-2018-1002105Kubernetes cluster vulnerability scanner that detects CVE-2018-1002105 by testing for unauthenticated API access and privilege escalation via…
sagehack/cloud-busterA Cloudflare resolver that works
salesforce/metabadgerPrevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
francesc-h/firebaseExploiting misconfigured firebase databases
borenstein/yolo-cageAI coding agents that can't exfiltrate secrets or merge their own PRs.
zerobyte-id/bashterWeb Vulnerability Scanner using Shell Script
itinerisltd/trellis-cve-2018-6389Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks
teyhouse/cve-2024-3094K8S and Docker Vulnerability Check for CVE-2024-3094
spiarh/webhook-cve-2022-0811Simple webhook to block exploitation of CVE-2022-0811
tlwebdesign/joomla-3.10.12-languagehelper-hotfixPlugin to fix security vulnerability CVE-2023-40626 in Joomla 3.10.12
