Tools

aker-gateway/aker

SSH bastion/jump host/jumpserver

cyberark/blobhunter

Find exposed data in Azure with this public blob scanner

linnix-os/linnix

eBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.

dev-sec/ssh-baseline

DevSec SSH Baseline - InSpec Profile

1njected/cmloot

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares

dsccommunity/certificatedsc

DSC resources to simplify administration of certificates on a Windows Server.

9rnt/poro

Scan publicly accessible assets on your AWS cloud environment

xddxdd/nixos-config

Lan Tian's NixOS Configuration

dev-sec/nginx-baseline

DevSec Nginx Baseline - InSpec Profile

appsecco/spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

nccgroup/cloud_ip_ranges

Identify IP addresses owned by public cloud providers

gen0cide/laforge

Competition Infrastructure Management

appliscale/cloud-security-audit

A command line security audit tool for Amazon Web Services

c0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

0xbharath/slurp-old

A tool to enumerate S3 buckets manually or via certstream

synacktiv/shh

Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

karimhabush/cis-vsphere

A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark.

nccgroup/s3_objects_check

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.