krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockerized NGINX instances: pattern-based “risky rewrite” snippet vs remediated named-capture snippet, pinned to nginx:1.30.0-alpine / nginx:1.30.1-alpine. Scripts run benign curls, dump nginx -T, and archive evidence. For configuration review...

scada-scanner

SCADA Scanner and Fingerprinter Overview A high-performance, asynchronous SCADA/ICS scanner for identifying and fingerprinting industrial control systems across networks. Detects vulnerabilities, identifies vendors/products, and generates comprehensive risk reports. WARNING: For authorized securi...

Loracrack

Loracrack - LoRaWAN session cracker A PoC for exploiting weak or shared Application Keys Created by Sipke Mellema of Applied Risk This is a Proof-of-Concept for demonstrating the dangers of using the same AppKey on multiple LoRaWAN nodes. This repository holds a toolbox for cracking LoRaWAN sessi...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ssrf attacks Overview Manufacturer's website information：https://maccms.pro Source code download address ： https://github.com/maccmspro/maccms10.git Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/22 Enter the...

4062-1

Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: root@kitploit: aftersuccess:...

fyp

Una herramienta de evaluación de vulnerabilidades basada en escritorio que permite a los equipos de seguridad escanear, identificar, explotar y reportar vulnerabilidades en aplicaciones web y redes. Descripción general Una plataforma de evaluación de vulnerabilidades diseñada para administradores...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Vulnerability discoverd by me CVE-2019-15233 Advisory: advisory Basic Info root@kitploit: Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site...

PingCastleCloud

Ping Castle Cloud important: the source code has been moved to the main PingCastle project. this project is now archived. Introduction Ping Castle Cloud is a tool designed to assess quickly the AzureAD security level with a methodology based on risk assessment and a maturity framework. It does no...

revera

Revera The credit score for npm packages. Revera helps you decide whether a package is worth installing before you run npm install. It analyzes package quality, maintenance, security, ecosystem health, and publisher trust — and now propagates risk transitively across your entire dependency graph ...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

Check Risk WAF

Check Risk WAF Российское комплексное облачное WAF-решение для защиты веб-приложений и инфраструктуры Russian integrated cloud WAF solution for web application and infrastructure protection Сайт · Документация · Русский · English Русская версия Check Risk WAF – это Российское комплексное облачное...

osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website · OSINT Tools · Best OSINT Tools · AI OSINT Tools · llms.txt · AI Prompt Map OsintNET ...

jeopardize

介绍 Jeopardize 工具旨在以最低成本提供针对网络钓鱼域名的基础威胁情报与响应能力。它能检测已注册的网络钓鱼域名候选（如形近域名、同形异义字攻击等），对其进行分析并分配风险评分。之后，它会向这些钓鱼网站上的登录表单发送看起来合法的凭证。 为什么？ 设想这个场景：攻击者注册一个钓鱼域名 acmebnak.com（acmebank 的形近域名），复制原 acmebank.com 的登录表单到该域名，并通过赞助推文推广。这个广告和域名很可能在次日被标记为钓鱼，但攻击者已经窃取了用户的凭证。此时再将其下线已无助于受影响的用户。Jeopardize...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

RiskAssessmentFramework

The OWASP Risk Assessment Framework Codacy Badge !GSOC...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gai...

kube-scan

Kube-Scan Try our free Kubernetes risk assessment tool today. Run it on any cluster at any time. No data leaves your cluster. We do not collect any information. For more information on Octarine see https://www.octarinesec.com. Get the risk score of your workloads Kube-Scan gives a risk score, fro...