DeepAudit

DeepAudit - Your AI Security Audit Team, Making Vulnerability Discovery Accessible...

WhatCMS

WhatCMS.sh 基于 Whatcms.org API 的 CMS 检测与利用套件。 简介 Whatcms.sh 当前可检测超过 330 种 不同的 CMS 应用和服务，随后为检测到的 CMS 列出一套有效的安全审计工具。 你需要 whatcms.org 的 API 密钥才能使用本工具： 获取 API 密钥 使用 用法： ./whatcms.sh example.com root@kitploit: -h 显示帮助信息 -wh 检查托管详情 --tools 显示工具信息 信息 已检测的 CMS CMS 列表 包含的工具...

cloud-security-audit

Cloud Security Audit...

cs-suite

Cloud Security Suite cs-suite - Version 3.0 Usage root@kitploit: usage: cs.py -h -env aws,gcp,azure,digitalocean -aip AUDITIP -u USERNAME -pem PEMFILE -p -pId PROJECTID -azu AZUREUSER -azp AZUREPASS -o OUTPUT -w -n NUMBER this is to get IP address for lynis audit only optional arguments: -h, --he...

batchql

BatchQL BatchQL es un script de auditoría de seguridad de GraphQL centrado en realizar consultas y mutaciones GraphQL por lotes. Este script no es complejo y agradecemos las mejoras. Al explorar el espacio problemático de los ataques de batching en GraphQL, encontramos que hay algunas publicacion...

hyperfox

Hyperfox Hyperfox es una herramienta de auditoría de seguridad que proxy y registra el tráfico HTTP y HTTPS entre dos puntos. Instalación Puedes instalar la última versión de hyperfox en /usr/local/bin con el siguiente comando requiere privilegios de administrador: root@kitploit: curl -sL...

otseca

Herramienta de auditoría de seguridad de código abierto para buscar y volcar la configuración del sistema. Introducción | Descripción | Requisitos | Salida | Parámetros | Informes | Cómo funciona |...

airgorah

Airgorah 主にaircrack-ngツールスイートに基づくWiFiセキュリティ監査ソフトウェア インストール | 使用方法 | クレジット Airgorahは、近くのWiFiトラフィックをキャプチャし、アクセスポイントに接続しているクライアントを発見し、非認証攻撃を実行し、ハンドシェイクをキャプチャし、アクセスポイントのパスワードを解読できるWiFiセキュリティ監査ソフトウェアです。 Rustで書かれており、グラフィカル部分にはGTK4を使用しています。 ⭐ プロジェクトが気に入ったら星をつけるのを忘れずに！ Legal ⚠️...

kubestriker

Kubernetes 向けの高速セキュリティ監査ツール!!...

magescan

Mage Scan La idea detrás de esto es evaluar la calidad y seguridad de un sitio Magento al que no tienes acceso. Es el escenario cuando estás entrevistando a un posible desarrollador o evaluando a un nuevo cliente y quieres tener una idea de lo que te espera. Instalación .phar Descarga el archivo...

chain-bench

📖 Documentation Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time. To win the race...

cloudmapper

CloudMapper Nota : La funcionalidad de Visualización de Red comando prepare ya no se mantiene. CloudMapper te ayuda a analizar tus entornos de Amazon Web Services AWS. El propósito original era generar diagramas de red y mostrarlos en tu navegador funcionalidad ya no mantenida. Ahora contiene muc...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

linux-security-audit

Linux Security Audit Tool Linux Security Audit Tool based on the CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 If you find this helpful, please the "star" 🌟 to support further improvements. Table of Contents 1. Features 2. Preview 3. Result-Log 4. Supported OS 5. Prerequisites 6. Notes...

sshfinder

sshfinder Find every SSH service on your network, judge whether it meets your standard, and get told when that changes. sshfinder is a single Python file with no required dependencies. Point it at a CIDR range and it discovers SSH wherever it is actually listening — not just port 22 — confirms ea...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

dscanner

dScanner 🔍 Automated web reconnaissance tool for security audits Description dScanner consolidates multiple reconnaissance tools into a single command for the initial phase of web pentesting. Use only on authorized systems!!!! 🚀 Installation Required dependencies: curl dnsutils nmap whois httpx...

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...