24 matches found
GPOHound
GPOHound GPOHound is a tool for dumping and analysing Group Policy Objects GPOs extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in Active Directory environments. The tool integrates...
DIAL
DIAL Workloads on cloud provide equal opportunities for hackers as much as they do for internal teams. Cloud-native companies are open to attacks from both outside forces and from within. With ever growing risk of a security breach and cloud misconfiguration being one of the most common factor of...
linuxprivchecker
Linuxprivchecker.py A Linux Privilege Escalation Check Script Orginal Author: Mike Czumak Tv3rn1x -- @SecuritySift Current Maintainer: Michael Contino @Sleventyeleven This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege...
nerve
Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Table of Contents Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usage...
S3Scanner
S3Scanner Features - Usage - Quick Start - Installation - Discuss A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Scaleway Custom Features ⚡️ Multi-threaded scanning 🔭 Supports many built-in S3 storage providers or custom 🕵️♀️ Scans all...
KubeLight
OWASP KubeLight - Kubernetes Security Scanner Scan your Kubernetes Cluster for Security & Compliance 1. Scan K8s clusters to detect Misconfiguration. 2. Lightweight, Pure python, fast, multithreaded tool. 3. NoSQL Query Engine. 4. Realtime alerts on Slack 5. SBOM generation and Image Vulnerabilit...
audit_couchdb
Auditoría de CouchDB: La evaluación de seguridad simple y clara de CouchDB Audit CouchDB es una herramienta simple con un mensaje poderoso. Dada una URL de Apache CouchDB, te dirá todo lo que siempre quisiste saber sobre su seguridad. Objetivo Audit CouchDB realizará las siguientes acciones: 1...
Adalanche
Adalanche Código Abierto Visualizador y Explorador de Grafos de Ataque Adalanche ofrece resultados instantáneos, mostrándole qué permisos tienen los usuarios y grupos en un Directorio Activo. Es útil para visualizar y explorar quién puede tomar el control de cuentas, máquinas o el dominio complet...
cloudmapper
CloudMapper Nota : La funcionalidad de Visualización de Red comando prepare ya no se mantiene. CloudMapper te ayuda a analizar tus entornos de Amazon Web Services AWS. El propósito original era generar diagramas de red y mostrarlos en tu navegador funcionalidad ya no mantenida. Ahora contiene muc...
gixy
GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...
nerva
Nerva Nerva: CLI de huella digital de servicios rápida Características • Instalación • Inicio rápido • Uso • Protocolos • Biblioteca • Casos de uso • Solución de problemas Huella digital de servicios de alto rendimiento escrita en Go. Identifica más de 170 protocolos de red a través de transporte...
hammer
Overview Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to...
openshield
Open source Cloud Security Posture Management CSPM for Azure detect misconfigurations, map them to CIS / NIST / ISO 27001 / SOC 2, remediate with one command, and identify cryptographic assets requiring quantum-safe migration. Website · Documentation · Roadmap · Changelog · Security Policy · Disc...
legitify
¡Fortalece la postura de seguridad de tu gestión de código fuente! Detecta y corrige configuraciones incorrectas, problemas de seguridad y cumplimiento en todos tus activos de GitHub y GitLab con facilidad 🔥 por Legit Security. ¿Te preguntas qué hace Legit Security?...
electronegativity
Electronegativity ⚠️ Ya no mantenemos activamente este proyecto ⚠️ ¿Qué es Electronegativity? Electronegativity es una herramienta para identificar configuraciones incorrectas y anti-patrones de seguridad en aplicaciones basadas en Electron. Aprovecha el análisis de AST y DOM para buscar...
ImCurvin
ImCurvin' ImCurvin is an open-source web security auditing and penetration testing tool designed as a Proof-of-Concept PoC to automate environment misconfiguration detection, track exposed configuration blueprints, and probe backend vulnerabilities. Detailed information regarding ImCurvin can be...
dbdtct
dbgdtct Desctiption dbgdtct is a Python-based tool designed to help you detect if a web application is deployed in debug mode—a critical misconfiguration that can expose sensitive information and increase the risk of exploitation in production environments. Installation root@kitploit: git clone...
nginxpwner
Nginxpwner Nginxpwner es una herramienta simple para buscar configuraciones incorrectas y vulnerabilidades comunes de Nginx. Instalación: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Instalar usando Docker root@kitploit: gi...
📄 Python-Multipart Path Traversal
This code bundle contains two separate components related to the path traversal vulnerability affecting Python-Multipart versions prior to 0.0.22. ================================================================================================================================== | Title :...
