guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

laurel

Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

MakerChecker

🛡️ MakerChecker The open-source security layer for AI agents. Deny-by-default enforcement, human approvals, and a cryptographically signed audit trail — so your agent runs only what it's granted and provably can't approve its own work. Website · Live Demo · mc scan · Docs Your agents keep running...

ldapnomnom

LDAP Nom Nom Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by abusing LDAP Ping requests cLDAP Looks for enabled normal user accounts. No Windows audit logs generated. High speed up to 50K/sec per server - go way beyond that with multiple...

macOS_security_audit

🔒 macOS Security Audit A Bash-based security auditing toolkit for macOS that checks system hardening settings against CIS Benchmark recommendations and generates JSON/HTML reports. Created by Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Overview This toolkit consists of two scripts:...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...

DFIR-O365RC

Table of contents: 1. Module description 2. Installation and prerequisites 1. Using Docker 2. Manual Installation 3. Managing the DFIR-O365RC application 1. Creating the application 2. Updating the application 3. Removing the application 4. Permissions and license requirements 5. Functions includ...

kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

kontext-cli

网站 | 文档 | 仪表盘 | Discord Kontext 是一个面向 AI 代理的授权平台。它帮助团队通过作用域凭据、策略执行、审批和审计跟踪来控制代理可以访问和操作的内容。Kontext 可以以本地优先的方式运行，适用于开发代理，并可扩展到受管或自托管部署，以满足安全敏感环境的需求。 快速开始 root@kitploit: brew install kontext-security/tap/kontext 将您的机器连接到工作区 使用自助设置将您机器上的代理活动流传输到团队的 Kontext 仪表盘。 在工作区的 Deployments 页面生成安装令牌，然后运行：...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

harbian-audit

harbian-audit审计与加固 简介 本项目是面向 Debian GNU/Linux、CentOS 8 和 Ubuntu 发行版的安全审计与加固工具。当前主要测试环境为 Debian GNU/Linux 9/10/11/12/13、CentOS 8 以及 Ubuntu 22，其他版本尚未经过充分测试。本项目主要面向服务器场景，暂未针对桌面环境实现对应检查项。 本项目基于 OVH-debian-cis 框架，并结合 Debian GNU/Linux 9 的一些特性进行了优化。同时参考了安全合规基线 STIG（STIG RedHatEnterpriseLinux7V2R5 及 STIG...

scopeblind-gateway

⚠️ 此仓库已迁移。 后续开发请移至 ScopeBlind/scopeblind-gateway 。 此个人分支可能落后于官方仓库。请使用组织仓库提交问题、拉取请求并获取最新代码。 protect-mcp MCP 服务器安全网关。默认以影子模式记录日志，支持按工具策略、可选的本地 Ed25519 签名收据，以及便于验证的审计输出。 当前 CLI 路径： 将任何 stdio MCP 服务器包装为透明代理。在影子模式下，它会记录所有 tools/call 请求并放行所有内容。添加策略文件以实施按工具规则。运行 protect-mcp init 生成本地签名密钥和配置，以便网关也能输出签名收据。...

Nix-Auditor

Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...

hubble

Welcome to HubbleStack!! You can file an issue here Follow us on Twitter! Development Below are sample instructions to setup a dev environment: 1. virtualenv myvirtualenv 2. source myvirtualenv/bin/activate 3. pip install -r requirements.txt 4. sudo python setup.py develop 5. sudo hubble...

LID

root@kitploit: ██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LI...

nmap

nmap Esta biblioteca tiene como objetivo proporcionar bindings idiomáticos de nmap para desarrolladores de Go, con el fin de facilitar la escritura de herramientas de auditoría de seguridad usando golang. Qué es nmap Nmap Network Mapper es un escáner de redes gratuito y de código abierto creado p...