cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

reposaur

Reposaur Reposaur 是面向开发平台的开源合规工具。 使用预定义和/或自定义策略，轻松审计、验证和报告你的数据和配置。 支持 GitHub。即将支持 GitLab、BitBucket 和 Gitea。 ⚠️ 在 1.0.0 之前，预计会有一些 bug 和 API 变更 ⚠️ • • • •...

codetotal

CodeTotal CodeTotal analiza cualquier fragmento , archivo o repositorio para detectar posibles fallos de seguridad como secretos en código , vulnerabilidades de código abierto , seguridad del código , , insegura, y posibles con licencias de código abierto...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

WordPress Cookie Information/Free GDPR Consent Solution plugin prior to 2.0.8 contains a cross-site scripting vulnerability via the admin dashboard. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

checkov

...

riskscanner

Advertencia Este proyecto ha dejado de mantenerse, se ha migrado al módulo de cumplimiento de seguridad de CloudExplorer Lite. RiskScanner Plataforma de escaneo de cumplimiento de seguridad multi-nube de código abierto...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

pacbot

Introducción Policy as Code Bot PacBot es una plataforma para la monitorización continua del cumplimiento normativo, la generación de informes de cumplimiento y la automatización de la seguridad en la nube. En PacBot, las políticas de seguridad y cumplimiento se implementan como código. Todos los...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

threatbox

Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...

legitify

增强您的源代码管理安全态势！ 检测并修复所有GitHub和GitLab资产中的错误配置、安全与合规问题 🔥 由 Legit Security 提供。 想知道 Legit Security 是做什么的吗？ Legit Security 是一个应用程序安全态势管理（ASPM）和软件供应链安全解决方案。 更多信息请查看 对比表 https://user-images.githubusercontent.com/107790206/210602039-2d022692-87ea-4005-b9c6-f091158de3ce.mov 安装 可以通过多种方式安装： 在 macOS（或 Linux）上...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

cis-vsphere

🦍 CIS vSphere 一个用于评估VMware vSphere环境是否符合CIS VMware vSphere基准合规性的工具。 需求 VMware PowerCLI 12.0.0 或更高版本 VMware vSphere 7.0 对vCenter或ESXi主机的读取权限 用法 1. 克隆仓库并导航到文件夹： root@kitploit: git clone https://github.com/karimhabush/cis-vsphere.git cd cis-vsphere 2. 安装PowerCLI： root@kitploit: Install-Module -Name...

ZeusCloud

保护您的云安全。 ZeusCloud 是一个开源云安全平台 发现、优先处理并修复您在云中的风险。 构建 AWS 账户的资产清单。 基于公共暴露、IAM、漏洞等发现攻击路径。 通过图形化上下文优先处理发现项。 提供分步骤指导来修复发现项。 自定义安全和合规控制以满足您的需求。 满足 PCI DSS、CIS、SOC 2 等合规标准！ 目录 快速开始 沙箱 功能特性 为什么选择 ZeusCloud？ 未来路线图 贡献 开发 安全 开源版与付费版 快速开始 1. 克隆仓库：git clone --recurse-submodules...