
kube-score
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…

Intentionally vulnerable Terraform infrastructure for learning cloud misconfiguration detection and DevSecOps practices across AWS, Azure, and GCP.

PowerShell-based security assessment framework for Microsoft 365, Azure, and Entra ID. Scans for misconfigurations, CIS benchmark compliance, and…

Fast and configurable TLS grabber focused on TLS based data collection.

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting)…

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

HardeningKitty - Checks and hardens your Windows configuration

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Exploitation script for exposed Java Debug Wire Protocol (JDWP) services, enabling pentesters to inject Java code and execute arbitrary OS commands…

This skill helps Claude write secure code and prevent common vulnerabilities.

Wire-level proxy firewall for AI agents that intercepts and gates SQL, Kubernetes, and HTTP traffic using HCL rules, with per-process tunnel…

Unified application gateway providing reverse proxy, WAF, CC defense, OAuth2 authentication, ACME certificate automation, and GSLB for secure,…

Test and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…

An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure