Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
easysec — EasySec helps small and medium-sized enterprises (SMEs) with cybersecurity knowledge and resources | Kitploit
Tools/GitHubGitHub/vera0011/easysec
Vulnerability AnalysisSecurity VirtualizationPenetration TestingLearning & EducationRed TeamingCurated Resources
GitHubvera0011/easysec

easysec

EasySec helps small and medium-sized enterprises (SMEs) with cybersecurity knowledge and resources

View Repository
231 day agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

EasySec - English

Introduction

EasySec is a repository that includes a variety of roles, documentation, and tools designed to help small and medium-sized enterprises (SMEs) implement security measures within their own organizations, as well as promoting penetration testing and red teaming exercises. This file will serve as an index to make it easier to review and analyze the available tools and documentation. The tools and workflows implemented are idempotent. This means that no matter how many times they are run, the result will always be the same.

Disclaimer and contributions

This project is completely open source, created by Vera and licensed under the MIT License. Any contributions, suggestions, or implementations can be submitted in the “Pull Requests” section.

Setup

Two scripts are available under scripts/:

  • execute.sh: Interactive CLI to select and run specific modules or workflows
  • populate.sh: Fills the inventory hosts section automatically or manuall (production or staging)

Environment

The recommended setup uses UV for Python environment management. These are the recommended actions:

root@kitploit:~
uv python pin                       # Uses the .python-version file and selects the specific interpreter version
uv venv .venv                       # Creates the virtual environment
source .venv/bin/activate           # Activates the virtual environment
uv pip install -r requirements.txt  # Installs required dependencies

Running

The main script can be executed (from the root project path) with:

root@kitploit:~
./scripts/execute.sh

[!NOTE] Ensure Vagrant and VirtualBox are installed and running before executing any script (if you will be using Vagrant)

Roadmap

Depending on how the project progresses, these are the tools and environments I would like to implement:

  • Proxychains + Tor
  • Lynis
  • Grype
  • Syft
  • Grant
  • Keycloak
  • Auditory
  • Hardening
  • OpenLDAP
  • Netmaker
  • Pomerium
  • Netbird
  • MISP
  • TheHive
  • Suricata
  • Nftables
  • Iptables
  • UFW
  • Teleport
  • Jenkins
  • Graylog
  • OpenSCAP
  • InSpec
  • OpenVAS
  • Nessus
  • Trivy
  • SOC environment - Wazuh
  • SOAR environment - Shuffle
  • Bandit
  • HashiCorp Vault
  • Checkov
  • Trivy
  • Gitleaks
  • Betterleaks
  • Fail2ban
  • Aikido Safe-chain
  • ScoutSuite
  • NixOS - Based on Sécurix
  • Red Teaming Environment - Required Tools
  • Fleet
  • GLPI
  • OWASP Dependency-Track

Resources

Red Team

Tools

  • Proxychains - Software for using proxies more conveniently. Information on implementation here

Blue team

Tools

  • Lynis - Software for machine and container analysis and generating reports (based on specific guidelines). Information of implementation here
  • Grype - Software for machine, container and repository analysis and generating reports. Information of implementation here
  • Syft - Software for SBOM generation. Information of implementation here
  • Grant - Software to analyze currently used Licenses. Information of implementation here
  • SSL - A set of tools that work together to generate SSL certificates for domains and using DNS providers. Information of the implementation here
  • PostgreSQL - Database installation and configuration. Information of the implementation here
  • Auditory Role that includes multiple tools to audit a specific system. Information of implementation here
  • Hardening - Role that applies multiple configurations related to system hardening. Information of implementation here

Workflows

  • Anchore - Workflow including multiple tools to analyze dependencies and licenses. Information of implementation here
  • Keycloak - Workflow that implements a Keycloak instance. Information of implementation here
Download Tool