1438000 matches found
gh-safe-repo
gh-safe-repo Create GitHub repositories with safe defaults applied automatically. Replaces the five-minute post-creation settings checklist with a single command. root@kitploit: gh-safe-repo create Branch protection, immutable tags, Dependabot, restricted Actions permissions, secret scanning with...
macnoise
MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...
wphunter
WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...
owasp-cstg
OWASP Cloud Security Testing Guide The Cloud Security Testing Guide CSTG is a comprehensive, vendor-neutral manual for testing the security of cloud environments. It is written for penetration testers, cloud and platform engineers, security architects, detection engineers, and auditors - anyone w...
SOC_287
SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...
Azure-Sentinel
Microsoft Sentinel and Microsoft 365 Defender Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft...
dorothy
Created by David French @threatpunter at Elastic Security Dorothy is a tool to help security teams test their monitoring and detection capabilities for their Okta environment. Dorothy has several modules to simulate actions that an attacker might take while operating in an Okta environment and...
cve-2023-34034
cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...
house
root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...
ansible-collection-hardening
Ansible Collection - devsec.hardening...
ferret
Ferret The collaborative MITM proxy for security testers. Capture HTTP traffic, annotate requests with AI, run hunt sessions, replay traffic, and track findings from one interface. Quick start · Features · Screenshots · Configuration · Security · Contributing Quick start Install root@kitploit: gi...
honggfuzz
Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...
security-advisories
Security Advisories Public security advisories by Greg Durys...
CloudGrappler
CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...
httptoolkit
HTTP Toolkit...
swap_digger
swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...
pisc
Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...
mastyf.ai
mastyf.ai Perimeter security for your AI. Runtime enforcement, policy control, and full audit trail for every AI action. Website · Quick start · Policy · Dashboard · GitHub The problem AI agents can read your files, push code, query databases, execute shell commands, and call external APIs. They ...
CVE-2019-2725
CVE-2019-2725...
sloppy-joe
Catch hallucinated, typosquatted, and non-canonical dependencies before they reach production. cargo install sloppy-joe TheLiteLLM supply chain attack March 2026 compromised a package with 97M monthly downloads. Attackers stole publishing credentials, pushed malicious versions that harvested SSH...