Misconfiguration

domain-protect/domain-protect

OWASP Domain Protect - prevent subdomain takeover

opencspm/opencspm

Open Cloud Security Posture Management Engine

jsa2/caoptics

CA Optics - Azure AD Conditional Access Gap Analyzer

edoverflow/megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

reposaur/reposaur

Open source compliance tool for development platforms.

gravitational/cve-2018-1002105

Kubernetes cluster vulnerability scanner that detects CVE-2018-1002105 by testing for unauthenticated API access and privilege escalation via…

sagehack/cloud-buster

A Cloudflare resolver that works

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

francesc-h/firebase

Exploiting misconfigured firebase databases

borenstein/yolo-cage

AI coding agents that can't exfiltrate secrets or merge their own PRs.

zerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

itinerisltd/trellis-cve-2018-6389

Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks

teyhouse/cve-2024-3094

K8S and Docker Vulnerability Check for CVE-2024-3094

spiarh/webhook-cve-2022-0811

Simple webhook to block exploitation of CVE-2022-0811

tlwebdesign/joomla-3.10.12-languagehelper-hotfix

Plugin to fix security vulnerability CVE-2023-40626 in Joomla 3.10.12

jenkinsci-cert/security-3314-3315

Workaround for disabling the CLI to mitigate SECURITY-3314/CVE-2024-23897 and SECURITY-3315/CVE-2024-23898

grails/gssc-cve-2022-41923

Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…