sec-af

SEC-AF AI-Native Security Auditor Built on AgentField Output • Benchmark • How It Works • Comparison • Quick Start • API Other tools flag patterns. SEC-AF proves exploitability : every finding ships with a verdict, a data flow trace, and evidence you can act on. Free, open source, one API call. A...

wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

Nix-Auditor

Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...

ssh-auditor

SSH Auditor Fonctionnalités ssh-auditor effectuera automatiquement : Revérifier tous les hôtes connus lorsque de nouveaux identifiants sont ajoutés. Il ne vérifiera que les nouveaux identifiants. Mettre en file d'attente un scan complet des identifiants sur tout nouvel hôte découvert. Mettre en...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

mesh-kridik

mesh-kridik Améliorez la sécurité de votre maillage de services Kubernetes !! mesh-kridik est un vérificateur de sécurité open-source qui effectue diverses vérifications de sécurité sur un cluster Kubernetes avec le maillage de services Istio et produit un rapport de sécurité. Les tests de...

CVE-2022-31199

CVE-2022-31199 - Netwrix Auditor RCE Exploit POCs 🔍 Vulnerability Overview CVE-2022-31199 is a critical insecure object deserialization vulnerability in Netwrix Auditor versions prior to 10.5. The vulnerability exists in an unsecured .NET Remoting service listening on TCP port 9004, allowing...

key-transparency-auditor

key-transparency-auditor A reference implementation of a third-party auditor for Signal's key transparency service, based on the key transparency specification. Overview This service is written in Java using the Micronaut framework. To build and unit test, run ./mvnw clean test in the root...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts Patch-Gap Auditor A small Python tool that finds Apach...

azure-security-auditor

Azure Security Posture Auditor A lightweight, production-style CLI tool that audits Azure security configurations and surfaces common misconfigurations — mirroring what Microsoft Defender for Cloud checks internally. Checks ID| Category| Check| Severity ---|---|---|--- AZ-001| RBAC| Owner /...

rsc-security-auditor

🛡️ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. 🚨 Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...

Windows-Defender-Security-Auditor-CVE-2026-50656-

Windows Defender Security Auditor Enterprise-Grade Windows Security Posture & Threat-Hunting Assessment Tool Developed byAmish Kumar — Security Researcher / Security Engineer CVE-2026-50656 Overview Windows Defender Security Auditor is a comprehensive, non-intrusive PowerShell-based security...

gh-workflow-auditor

GitHub Workflow Auditor Workflow auditing tools to identify security issues in GitHub workflows Usage usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org Name or Repo na...

duo-agentflow-auditor

Duo AgentFlow Auditor AI Code Security — catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses — prompt injection, LLM output execution, unsafe M...

honeypot-auditor

.. :: H-AUDITOR :: v1.0.3 :: "DIALING IN... CARRIER DETECTED" :: --- "warez? nah. headers. we trade banners, not bins." "if it answers any password, it ain't production — it's a lure." "respect the sysop. probe only what you own. leave no STOR behind." Does This Look Like An Honeypot? DTLLAH —...

NetAudit-IoT

UPnP-Exploit-Auditor Advanced Research Tool for libupnp Vulnerabilities This repository contains professional research and a reconnaissance tool focused on libupnp 1.6.19 memory corruption vulnerabilities specifically CVE-2012-5958. Key Features Version Fingerprinting: Detects vulnerable libupnp...

hephaestus-server-forger

Server security auditor for Apache, Nginx & IIS — 13 scan phases, 70+ finding codes, AI-powered hardening guides. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · Apache 2.4.54 · 11 findings · 44.17s · scan 518 · safe mode !Hephaestus — HTML re...

Separation of Duties for Privileged LLM Agents: A Governed Execution Architecture with Measured Security-Utility Trade-Offs

Large language model agents are increasingly granted real privileges executing commands, modifying files, calling APIs, so an agent that errs has already acted. Existing defences concentrate on the agent's inputs, while the path from a candidate action to privileged side effects remains less...

CVE-2026-92570

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

CVE-2026-92570 reNgine through 2.2.0 Unauthorized Configuration File Read

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...