cli
snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.
cloud-infrastructure-securitycode-analysiscontainer-security+6
snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.
open-policy-agent/gatekeeperKubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
complianceascode/contentGenerates SCAP, Ansible, Bash, and CEL security content for compliance evaluation and automated hardening across Linux hosts, containers, and…
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
coreruleset/corerulesetGeneric attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
checkmarx/kicsStatic analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…
0x6d69636b/windows_hardeningHardeningKitty and Windows Hardening Settings
m0rtem/cloudfailUtilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
proviesec/google-dorksUseful Google Dorks for WebSecurity and Bug Bounty
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
aquasecurity/trivy-operatorKubernetes-native security operator that automates vulnerability scanning, configuration auditing, secret detection, RBAC analysis, and compliance…
subat0mik/misconfiguration-managerMisconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening…
sleventyeleven/linuxprivcheckerLocal Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…
jakehildreth/locksmithA small tool built to find and fix common misconfigurations in Active Directory Certificate Services.