opa
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
api-securityauthenticationauthentication-authorization+10
12.2k
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
firefart/stunnerTest and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
renniepak/cspbypassCSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…
synacktiv/sccmsecretsSCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
synacktiv/ounedThe OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
elc0mpa/aws-doctorPowerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
aquasecurity/kube-benchChecks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
skokoo/imcurvinAutomated web security auditing tool that detects environment misconfigurations, probes backend vulnerabilities, and bypasses WAF/IDS protections…
johenlastgen-jlg/cve-2026-11961CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
george0papasotiriou/cve-2026-21017-ldap-anonymous-bind-privilege-escalationPython proof-of-concept for LDAP anonymous bind privilege escalation, simulating insecure ACLs to create admin users via unauthenticated LDAP binds.
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
megamansec/gixy-nextGixy-Next: NGINX Configuration Security Scanner & Performance Checker
jakehildreth/locksmithA small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
neelkotnis/azure-security-auditorCLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption