misconfiguration
There are 7 repositories under misconfiguration topic.
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Language:Go 29734- tfsec
Tfsec is now part of Trivy
Language:Go 6914 - SUDO_KILLER
TH3xACE / SUDO_KILLER
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
Language:Shell 2389 Kubernetes-native security toolkit
Language:Go 1671nickvourd / Windows-Local-Privilege-Escalation-Cookbook
Windows Local Privilege Escalation Cookbook
Language:PowerShell 1207- Language:Go 831
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
Language:Go 758b3rito / yotter
yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage
Language:Shell 125fatihtokus / scan2html
A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.
Language:HTML 116Vinum-Security / yandex-cloud-security
⛅️🔐 Security Requirements for Yandex.Cloud configuration: IAM, network access, key management, Kubernetes, audit logs.
padok-team / yatas-aws
Plugin for YATAS that audits AWS accounts for misconfiguration and security issues
Language:Go 14K3ysTr0K3R / DroidSniper
DroidSniper - Misconfigured Android Debug Bridge Scanner
Language:Python 13Kloudle / aws-iam-large-account-security
Security insights for AWS IAM in large-scale accounts (20K+ users), bypassing CSPM limitations.
root4031 / cors_scanner
Fast CORS Misconfiguration Scanner
Language:Shell 7- Language:Go 5
sicpa-foundations / secretKeeper
SecretKeeper is a tool for detecting secrets and misconfigurations on your Git repositories (Bitbucket and GitHub).
Language:Python 4cehuda1 / env-breaker
Env Breaker adalah Pemindaian dan deteksi file .env pada situs-situs target. Skrip ini membantu mengidentifikasi kemungkinan kebocoran informasi sensitif yang terkait dengan file .env
Language:PHP 3Plugin for YATAS that audits GCP projects for misconfiguration and security issues
Language:Go 3Rozan312 / Cloud-Service-Hunting
This script automate exploit only cloud service
Language:Python 3secshubhamsharma / FireSploit
FireSploit is a powerful tool for ethical hackers, developers, and security researchers. It helps find and fix misconfigured Firebase databases that are exposing sensitive data to the public. By scanning for open read/write access, it helps you secure your applications and prevent data breaches.
Language:Python 3Archive-Puma / nucleo
⚛️ nucleo is a script that checks common vulnerabilities and security misconfigurations, strongly inspired by nuclei.
Language:Shell 2codershiyar / WinPrivilegeEscalation
This repository provides easy-to-follow methods for gaining admin rights (privilege escalation) on Windows 10, 11, and newer systems. Learn how to identify and exploit misconfigurations, weak permissions, and common security flaws to escalate user privileges. Perfect for ethical hackers, penetration testers, and security researchers looking to test
Language:HTML 2- Language:Shell 2
- Language:Python 2
ShackWove / NetGun
NetGun is a free and open source tool for port scanning, services enumeration, misconfigurations testing and CVE research. This is only for testing, official repository: https://github.com/MyCr4ck/NetGun_Classe03
Language:HTML 2ibrahmsql / CloudVault
AWS S3 bucket scanner | Find exposed S3 buckets, Azure Blob & Google Cloud Storage | Cloud security scanner tool | Bucket enumeration & vulnerability detection
Language:Python 1killukeren / Hosti
Automation tools untuk mendeteksi celah misconfig Host Header injection
Language:Python 1gsscoder / configinsights
Azure services configuration analyzer
Language:C# 0- Language:HTML 0
- Language:Python
AWS-Security-Portfolio / s3-security
Securing S3 buckets: Test public access, apply policies and encryption, and detect misconfigurations with AWS Trusted Advisor. Includes screenshots, policy examples, and clear documentation.
covertlabsaus / S3eker
A Firebase security scanner that checks for common misconfigurations in Auth, RTDB, Firestore, and Storage, reporting risks in a clear JSON format.
Language:Godafneb / MiCloudPurple
Microsoft Cloud Purple tool
Language:PythonMottaSec / Argus-AD
Argus-AD is a comprehensive Active Directory security assessment tool designed for SYSADMINs and IT Admins to identify misconfigurations, privilege escalation paths, lateral movement opportunities, and hybrid identity issues in their Active Directory environments.
Language:PowerShellUsamaMatrix / cloud-exploit-framework
⚠️ Description only - code is confidential. Automates cloud security assessments for AWS, Azure, and GCP to detect misconfigurations and perform controlled exploitation.
