CIS GitLab Benchmark Scanner

CIS GitLab Benchmark-Scanner - gitlabcis Hintergrund Am 17. April 2024 veröffentlichte GitLab™ einen Blogbeitrag, in dem es seinen Center for Internet Security® CIS GitLab-Benchmark vorstellte. Ziel ist es, die Sicherheit des Produkts zu verbessern und Härtungsempfehlungen für GitLab-Kunden...

laf

LoRaWAN Auditing Framework - VERSIONE ALFA Le implementazioni IoT continuano a crescere e una parte di questa significativa crescita è composta da milioni di sensori LPWAN low-power wide-area network distribuiti in centinaia di città Smart Cities in tutto il mondo, oltre che in industrie e case...

OMLASP

OMLASP root@kitploit: | | | | | | || | | || | | | | | | | | OMLASP - Open Machine Learning Application Security Project ist als Standard für die Prüfung von Machine-Learning-Algorithmen gedacht. Dabei liegt der Fokus nicht nur auf der Sicherheit der Algorithmen, sondern auch auf deren Verzerrunge...

DNSint

DNSint 🔍 مجموعة أدوات احترافية لاستكشاف DNS وجمع المعلومات مفتوحة المصدر أداة شاملة لتحليل DNS وجمع المعلومات الأمنية لاستكشاف النطاقات تم إنشاؤها بواسطة wh0xac المميزات • التثبيت • الاستخدام • أمثلة • التوثيق 🎯 نظرة عامة DNSint هي أداة قوية وشاملة لاستقصاء DNS وجمع المعلومات مفتوحة المصدر OSINT،...

Wynis

Wynis Apenas um script do PowerShell para auditoria de segurança com as MELHORES Práticas no ambiente Windows Você só precisa executar o script, ele criará um diretório chamado: AUDITCONF%MACHINENAME%DATE% Atualmente, os scripts são: -WynisWIN2016DC-CISv1.0 : Auditoria do DC 2016 com CIS -Wynis-A...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

ImCurvin

ImCurvin' ImCurvin ist ein Open-Source-Tool für Web-Sicherheitsaudits und Penetrationstests, das entwickelt wurde, um die Erkennung von Fehlkonfigurationen in der Umgebung zu automatisieren, exponierte Konfigurations-Blaupausen zu verfolgen und Backend-Schwachstellen zu untersuchen. Detaillierte...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

chaosblade

Chaosblade: Ein einfach zu verwendendes und leistungsstarkes Chaos-Engineering-Toolkit Chinesische Version README Wiki: DeepWiki 🔥🔥🔥 Großes Update：Chaosblade Agent veröffentlicht - Blade AI Blade AI dient als intelligente Agentenschicht innerhalb des ChaosBlade-Ökosystems: Auf der Basisebene ruft...

Kestrel

Kestrel O BloodHound mostra o caminho. O Kestrel mostra o que já está lá dentro. Todos mapeiam a mesma coisa: o caminho de ataque - quem consegue chegar ao Domain Admin. É a pergunta certa, e as ferramentas que a respondem são excelentes. Mas um grafo de "quem alcança quem" é cego para uma classe...

defense-matrix

Defense Matrix Progetto Archiviato Questo progetto era un tentativo di automatizzare vari aspetti del controllo e dell'hardening della sicurezza di Linux. Con il passare del tempo, io K4YT3X ho trovato molte delle metodologie utilizzate in questo progetto non ideali e obsolete. Pertanto, raccoman...

EUVD-2026-25014

printenv: environment variables with invalid UTF-8 are silently skipped evades inspection...

[SECURITY] Fedora 44 Update: nmap-7.92-11.fc44

Nmap is a utility for network exploration or security auditing. It supports ping scanning determine which hosts are up, many port scanning techniques determine what services the hosts are offering, and TCP/IP fingerprinting remote host operating system identification. Nmap also offers flexible ta...

Revive Adserver 6.0.6 Security Auditor

This script is a defensive security auditing utility designed to identify exposed services, review configuration weaknesses, and collect security posture information from a Revive Adserver deployment without performing direct exploitation...

WebADM Security Auditor and Content Exposure Scanner

This Python script is a defensive security auditing tool designed to analyze a target web application for potential information exposure and security misconfigurations, specifically focusing on environments resembling WebADM. This was tested on version 2.4.17-1...

PCLink 4.1.1 Basic API Exposure / Header Misconfiguration Scanner

This Python script is a lightweight security auditing tool designed to assess a PCLink server for potential exposure of sensitive headers and extension-related API endpoints. It's written to analyze version 4.1.1...

Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cpanel_Plugin

CVE-2026-48172 - LiteSpeed cPanel Plugin Vulnerability Auditor...

cpython: CPython: Logging Bypass in Legacy .pyc File Handling

A flaw was found in CPython. This vulnerability allows a local user with low privileges to bypass security auditing mechanisms. The issue occurs because the SourcelessFileLoader component, responsible for handling older Python compiled files .pyc, does not properly trigger system audit events. Th...