tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run audit tailsnitch 3...

inql

InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

plown

About Plown is a security scanner for Plone CMS. Although Plone has the best security track record of any major CMS and is considered highly secure, misconfigurations and weak passwords might enable system break-ins. Plown has been developed to ease the discovery of usernames and passwords, and a...

linux-security-audit

Linux Security Audit Tool Linux Security Audit Tool based on the CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 If you find this helpful, please the "star" 🌟 to support further improvements. Table of Contents 1. Features 2. Preview 3. Result-Log 4. Supported OS 5. Prerequisites 6. Notes...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

dscanner

dScanner 🔍 Herramienta automatizada de reconocimiento web para auditorías de seguridad Descripción dScanner consolida múltiples herramientas de reconocimiento en un solo comando para la fase inicial de pentesting web. Solo usar con sistemas autorizados!!!! 🚀 Instalación Dependencias requeridas:...

DeepAudit

DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible 简体中文 | English Screenshots Agent Audit Entry Quick access to Multi-Agent deep audit from the homepage Audit Flow Logs !Audit Flow...

publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...

nmap

nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...

D4N155

OWASP D4N155 BUG: Extract urls by domain dont work. Crawler Google stop. I'll fix It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us, See some calculations used Ongoing projects 👷: D4N155 in docker 🎁, Web API D4N155 ☁️,...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

chain-bench

📖 Documentationdocs Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time. To win the...

cloud-security-audit

Cloud Security Audit A command line security audit tool for Amazon Web Services About Cloud Security Audit is a command line tool that scans for vulnerabilities in your AWS Account. In easy way you will be able to identify unsecure parts of your infrastructure and prepare your AWS account for...

cs-suite

Cloud Security Suite cs-suite - Version 3.0 Usage usage: cs.py -h -env aws,gcp,azure,digitalocean -aip AUDITIP -u USERNAME -pem PEMFILE -p -pId PROJECTID -azu AZUREUSER -azp AZUREPASS -o OUTPUT -w -n NUMBER this is to get IP address for lynis audit only optional arguments: -h, --help show this he...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install wp-security-audit-log.5.2.1 or olde...

HuntCyberArk

HuntCyberArk - CyberArk Security Audit Suite A comprehensive PowerShell-based security assessment tool for CyberArk Privileged Access Management PAM platforms. Designed for offensive security professionals, red teamers, and penetration testers. This tool is designed to run REMOTELY against CyberA...