ad-password-protection

Lithnet Password Protection for Active Directory LPP enhances the options available to an organization wanting to ensure that all their Active Directory accounts have strong passwords. LPP is a module that you install on your Active Directory servers that uses a password filter to inspect passwor...

kit-policy

kit-policy A flexible, composable authorization framework for Kit, inspired by Ruby's Action Policy. TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/port-scan-automation Released under AGPL see LICEN...

CVE-2020-8554

Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...

Nexora

Nexora Nexora is an AI-driven enterprise endpoint governance and security intelligence system that monitors software usage across machines, applies policy-based risk classification, and generates structured behavioral and security reports. It is designed for environments where organizations need...

smalien

Smalien Smalien is an information flow analysis and information leakage detection tool for Android application analysts. Smalien performs static taint analysis of Android applications on a Linux machine as well as dynamic taint analysis, detection of information leakage due to implicit informatio...

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

policy_sentry

Policy Sentry Generador de políticas de mínimo privilegio para IAM...

brave-browser

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse es una aplicación .NET escrita en C que puede utilizarse para aprovechar los derechos de edición de un usuario sobre un Objeto de Directiva de Grupo GPO con el fin de comprometer los objetos controlados por ese GPO. Se pueden encontrar más detalles en la siguiente...

kyverno

Kyverno Cloud Native Policy Management 🎉...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

agent-governance-toolkit

🌍 English | 日本語 | 简体中文 | 한국어 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog -brightgreen !IMPORTANT Public P...

AgentGuard

AgentGuard Zero-trust sandbox for autonomous AI agents. AgentGuard wraps any AI agent LangChain, CrewAI, AutoGen, custom scripts with safety rails. One command change: root@kitploit: Before dangerous — agent has full system access python myagent.py After sandboxed agentguard run -- python...

CVE-2025-62506

CVE-2025-62506 Vulnerability Verification Script Overview This repository contains a verification script for CVE-2025-62506, a privilege escalation vulnerability in MinIO service accounts and STS Security Token Service accounts. Vulnerability Description CVE-2025-62506 is a privilege escalation...

HolyGrail

HolyGrail A BYOVD hunter for finding the HolyGrail driver - Windows drivers suitable for BYOVD. Install root@kitploit: git clone https://github.com/BlackSnufkin/HolyGrail cd HolyGrail cargo build --release Quick start root@kitploit: HolyGrail.exe -d "C:\path\to\driver.sys" Add JSON output, custom...

uaf-exploit-cve-2026-23415

CVE-2026-23415 PoC Proof of concept for CVE-2026-23415 , a use-after-free vulnerability in the Linux kernel futex subsystem. About the vulnerability A race condition exists between futexkeytonodeopt and vmareplacepolicy. While the futex code reads a virtual memory area's NUMA memory policy, anoth...

scopeblind-gateway

⚠️ Este repositorio se ha movido. El desarrollo activo continúa en ScopeBlind/scopeblind-gateway. Este fork personal podría estar detrás del repositorio canónico. Por favor, usa el repo de la organización para issues, pull requests y el código más reciente. protect-mcp Puerta de enlace de segurida...