koblers/np-auditStatic security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.
divyanshukumar0014/shipproofSOC 2 evidence that collects itself in GitLab CI: every merge emits a signed bundle, an OPA gate blocks releases with missing proof, and auditors get…
derv82/wifite2Rewrite of the popular wireless network auditor, "wifite"
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
adversis/tailsnitchA security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best…
adshao/flounderAutonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
sektioneins/pccAutomated PHP configuration auditor that scans php.ini for security misconfigurations, supports CLI and web modes, and outputs results in text, HTML,…
agent-field/sec-afAI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
g0h4n/rec2REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs written in…
chokepoint/belethMulti-threaded SSH Password Auditor
nccgroup/raccoonSalesforce object access auditor
g4bri-3l3/idwolfRead-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings, attack…
g4bri-3l3/hostbadgerWindows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI analysis
tc4dy/cve-2026-87902-toolkitWordPress CVE-2026-87902 LFI-to-RCE toolkit with a weaponized exploit chain (PEAR RCE, webshell, admin creation, loot) and a non-intrusive…
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
9pings/fad-checkerBuildless dependency auditor that scans 10 ecosystems offline, reporting CVEs prioritized by CISA KEV and EPSS, EOL packages, licenses, committed…
abrewer251/cve-2025-6543_citrixnetscaler_pocMulti-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV…