ScoutSuite

Descripción Scout Suite es una herramienta de auditoría de seguridad multi-nube de código abierto que permite evaluar la postura de seguridad de entornos en la nube. Utilizando las APIs expuestas por los proveedores de nube, Scout Suite recopila datos de configuración para su inspección manual y...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

ElectricEye

ElectricEye ElectricEye es una herramienta CLI de Python multi-nube y multi-SaaS para la gestión de activos, la postura de seguridad y la monitorización de la superficie de ataque, que admite cientos de servicios y evaluaciones para fortalecer tus entornos CSP y SaaS con controles asignados a más...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, es una plataforma de código abierto para obtener una visión más profunda de la configuración y los metadatos de su nube, ayudando a comprender y reducir el riesgo a lo largo del tiempo. ¿Para quién es OpenCSPM? Equipos de seguridad que...

legitify

¡Fortalece la postura de seguridad de tu gestión de código fuente! Detecta y corrige configuraciones incorrectas, problemas de seguridad y cumplimiento en todos tus activos de GitHub y GitLab con facilidad 🔥 por Legit Security. ¿Te preguntas qué hace Legit Security?...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

aws-recon

AWS Recon Una herramienta de recolección de inventario de AWS orientada a la seguridad y con múltiples hilos, escrita en Ruby. Esta herramienta se creó para facilitar la recolección eficiente de una gran cantidad de atributos y metadatos de recursos de AWS. Su objetivo es recopilar casi todo lo...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

honeypot

🍯 Honeypot Research Project What is a Honeypot A honeypot is a computer system or network that is intentionally left vulnerable to hackers in order to detect, analyse, and respond to potential security threats. The goal of a honeypot is to gather information about the tactics, techniques, and...

internal-security-detect

Internal Security Detection via Safebase Exposed SafeBase portals serve two audiences at once: prospects who need proof of your security posture, and security researchers blue and red teamers. Each green tick reveals a control that supposedly exists today; every missing tick is an equally loud hi...

LDAPRecon-AI

LDAPRecon-AI Auditor de Seguridad LDAP para Active Directory con Análisis Potenciado por IA Enumere, evalúe y puntúe la postura de seguridad de su entorno AD Inglés | Francés root@kitploit: | | | \ / \ | | \ / \ | | | | | | | |/ \ | | | | / / / | ' \ / \ | | | || || / | /| / | | | | |/ \ | |...

ResetSpy

ResetSpy Probe Microsoft's Self-Service Password Reset SSPR endpoint to enumerate registeted verification methods and flag any that lack a strong second factor. Provides user enumeration and an approximation of MFA posture across Entra accounts. !NOTE As of August 2026, Microsoft has removed the...

defender-privilege-escalation-scanner

Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...

cloud-doctor

cloud-doctor Un solo comando evalúa toda tu cuenta en la nube: configuraciones incorrectas, falta de observabilidad y postura de seguridad, clasificadas por las cinco cosas que arreglar primero. Apúntalo a AWS, Cloudflare, Vercel, Supabase, Render, Fly.io o Railway y devuelve una puntuación, lo q...

CVE-2026-76439

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

CVE-2026-76439 Cisco Identity Services Engine Event Injection Vulnerability

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

CVE-2026-76439

Cisco Identity Services Engine (ISE) has an event injection vulnerability in the endpoint posture status reporting functionality of its guest portal web application. The root cause is insufficient authentication on an internal interface that is exposed through the guest portal. An unauthenticated...

CVE-2026-76439 Cisco Identity Services Engine Event Injection Vulnerability

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...

EUVD-2026-81142

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...