CanaryHunter
c0axx/canaryhunterCanary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
adversarial-attackcloud-infrastructure-securityconfiguration-auditing+4
137
c0axx/canaryhunterCanary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
nccgroup/raccoonAudits Salesforce object-level access permissions, listing which profiles and permission sets have read/edit/delete access to all records of…
ayushpriya10/imdshiftAutomates migration of AWS workloads from IMDSv1 to IMDSv2 to mitigate SSRF attacks. Detects IMDSv1 usage across EC2, ECS, EKS, Lightsail, and more,…
xlab-si/iac-scan-runnerService that scans your Infrastructure as Code for common vulnerabilities
semonte/sisuMounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…
jdauphant/patch-openssl-cve-2014-0160Ansible playbook to patch OpenSSL against CVE-2014-0160 (Heartbleed) by upgrading packages and restarting affected services on Debian-family servers.
aoripus-ltd/januscape-hotfixComprehensive fix collection for CVE-2026-53359 KVM/x86 shadow MMU guest-to-host escape, offering livepatch, kpatch, kernel upgrade, and manual…
fer1035_terraform/modules/terraform-aws-security-groupTerraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs.
leitwacht/leitwachtRuntime security agent for GitLab Runner CI/CD that enforces network egress policies per container using eBPF, DNS proxy, and nftables to prevent…
dumbmachine/cloud-doctorOne command grades your whole cloud account — misconfigurations, missing observability, and security posture.
infiniroot/ansible-mitigate-copyfail-dirtyfragSimple Ansible Playbook to mitigate against CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284) vulnerabilities.
derekpreston81/cve_adc_ioc_2026Citrix NetScaler CVE Preconditions Checker as per CTX696604 | Supported CVE : CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816,…
vvpoglazov/cve-2024-41110-checkerParallel SSH-based scanner that detects CVE-2024-41110 in Docker installations, identifies vulnerable versions and AuthZ plugins, and generates a…
thirukguru/aws-perimeterTerminal-based AWS security scanner with 102+ checks across VPC, IAM, S3, CloudTrail, containers (ECS/EKS), and AI attack detection. Detects…
rjt-gupta/cve-2021-33104Proof-of-concept exploit for CVE-2021-33104, an improper access control vulnerability in Intel OFU software before version 14.1.28, enabling local…
gdraperi/remote-bitlocker-encryption-reportPowerShell script to mitigate CVE-2018-12038. The script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs a…
dawnsmithcyber/azure-vulnerability-remediation-projectEnd-to-end vulnerability management lifecycle on Azure Windows Server 2025. Features OS patching and network-level compensating controls (NSG) to…
tuladhar/ingress-nightmarePython script to detect vulnerable Ingress NGINX Controller versions (CVE-2025-1974) in Kubernetes clusters by auditing pod images and admission…