ESCepcion
hackwarts12/escepcionPassive AD CS auditor detecting ESC1–ESC16 and Shadow Credentials via read-only LDAP/ACL/registry checks, with prioritized remediation and SIEM-ready…
configuration-auditingdefensive-toolsmisconfiguration+4
2
hackwarts12/escepcionPassive AD CS auditor detecting ESC1–ESC16 and Shadow Credentials via read-only LDAP/ACL/registry checks, with prioritized remediation and SIEM-ready…
mthamil107/db_audit_researchSelf-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…
eh-amish/windows-defender-security-auditor-cve-2026-50656-
signalapp/key-transparency-auditorContinuously fetches and cryptographically verifies key transparency log updates, maintains a condensed prefix and log tree view, and returns signed…
g0h4n/rec2REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs written in…
nccgroup/raccoonSalesforce object access auditor
adshao/flounderAutonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
agent-field/sec-afAI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
koblers/np-auditStatic security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.
perufitlife/directus-securityKeyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks,…
sibersan/apache_audit_cve-2026-23918Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification…
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
adversis/tailsnitchA security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…
rodhnin/hephaestus-server-forgerserver security auditor scanning Apache, Nginx, and IIS configurations with AI-powered hardening guides and professional reporting.
rodhnin/asterion-network-minotaurNetwork and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides…