salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...

sslyze

SSLyze SSLyze es una herramienta de escaneo SSL/TLS rápida y potente, así como una biblioteca de Python. SSLyze puede analizar la configuración SSL/TLS de un servidor conectándose a él, para asegurarse de que utiliza configuraciones de cifrado sólidas certificado, suites de cifrado, curvas...

PrivescCheck

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

pgaudit

pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...

sncscan

sncscan Tool for analyzing SAP Secure Network Communications SNC. How to use? In its current state, sncscan can be used to read the SNC configurations for SAP Router and DIAG SAP GUI connections. The implementation for the SAP RFC protocol is currently in development. SAP Router SAP Routers can...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

adaudit

adaudit 此 PowerShell 脚本旨在对 Microsoft Active Directory 执行全面审计，重点识别常见安全漏洞与弱点。执行该脚本有助于精准定位需要加固的关键区域，从而抵御针对 Active Directory 的横向移动或权限提升攻击中常用的攻击手法。 root@kitploit: | | \ | | | || | | | | | | | | | . | | | |||/ ||||||| by phillips321 如果您有任何适用于此脚本的实用 PowerShell 单行命令，请告知我。我希望此脚本保持为单一文件，且不依赖外部工具（ntdsutil 和...

HuntCyberArk

HuntCyberArk - Suite de Auditoría de Seguridad de CyberArk Una herramienta integral de evaluación de seguridad basada en PowerShell para plataformas CyberArk Privileged Access Management PAM. Diseñada para profesionales de seguridad ofensiva, red teamers y probadores de penetración. Esta...

Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...

lil-pwny

Lil Pwny Fast offline auditing of Active Directory passwords using Python. About Lil Pwny Lil Pwny is a Python application to perform an offline audit of NTLM hashes of users' passwords, recovered from Active Directory, against known compromised passwords from Have I Been Pwned. Results will be...

agentsh

agentsh macOS 注意： 通过 ESF（端点安全框架）+ NE（网络扩展）实现的原生 macOS 强制执行功能目前处于 Alpha 阶段。它可以端到端工作——文件、进程和网络事件通过系统扩展流向 Go 策略引擎——但预期会存在粗糙的边缘以及版本间的破坏性变更。对于当前的生产环境使用，我们推荐使用 Linux。 Windows 注意： 我们正在努力完成微筛选器驱动程序的签名。在此之前，仅完全支持 Windows WSL2 模式用于生产环境。 面向 AI 代理的安全、策略强制的执行网关。 agentsh 位于你的代理/工具链之下——拦截文件 、网络 、进程 和信号...

Set-AuditRule

Set-AuditRule A repository of useful access control entries ACE that could be added to the system access control list SACL of a securable object's security descriptor to monitor potential adversarial activity. These entries are categorized by specific securable objects such as files, registry key...

yatas

YATAS Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something...

CVE-2025-57529

CPAS-bug CPAS审计管理信息系统存在SQL注入漏洞 北京优达数聚科技有限公司 域名: http://youdatasum.com 信息 root@kitploit: CVE-ID: CVE-2025-57529 受影响版本: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum, @RequestParamvalue = "pageSize", defaultValue = "10" int pageSize, @RequestParamvalue =...

WELA

WELA Windows Event Log Analyzer ゑ羅 A tool for auditing Windows event log settings. Created by Yamato Security — make sure you are actually recording the events that matter for DFIR. 📖 Read the Documentation → Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français ·...

vcheck

vcheck 通过 SSH 审计远程 Linux 主机是否存在 Copy Fail 和 Dirty Frag 内核模块漏洞，并可选择应用缓解措施： CVE| 名称| 受影响的模块 ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser CVE-2026-43500| Dirty Frag RxRPC| rxrpc, kafs 对于每个受影响的模块，vcheck...

D4N155

OWASP D4N155 BUG: Extract urls by domain dont work. Crawler Google stop. I'll fix It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us, See some calculations used Ongoing projects 👷: D4N155 in docker 🎁, Web API D4N155 ☁️,...

quien

quien A better whois and domain intelligence toolkit. Interactive TUI with tabbed views for WHOIS, DNS, mail, SSL/TLS, HTTP headers, SEO analysis, and tech stack detection. Try it without installing: ssh quien.sh Install Homebrew root@kitploit: brew install quien Ubuntu / Debian root@kitploit: cu...

processhacker-mcp

processhacker mcp this is dynamic mcp server for runtime analysis and process hacking. it is like processhacker but for ai agents. setup 1. open folder in visual studio it has cmakelists 2. build all ctrl+shift+b 3. it makes ProcessHackerMCP.exe and extensions/ folder. 4. run exe. it communicates...

vault

Vault 请注意 ：我们非常重视Vault的安全性和用户的信任。如果您认为发现了Vault的安全问题，请通过[email protected]联系我们进行负责任的披露 。 网站：developer.hashicorp.com/vault 公告列表：Google Groups 讨论论坛：Discuss 文档：https://developer.hashicorp.com/vault/docs 教程：https://developer.hashicorp.com/vault/tutorials...