misconfiguration topic

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

aquasecurity

yotter - bash script that performs recon and then uses dirb to discover directories that might lead to information leakage

b3rito

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges...

TH3xACE

Security scanner for your Terraform code

aquasecurity

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

firefart

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

aquasecurity

Kubernetes-native security toolkit

aquasecurity

Windows Local Privilege Escalation Cookbook

nickvourd

⛅️🔐 Security Requirements for Yandex.Cloud configuration: IAM, network access, key management, Kubernetes, audit logs.

Vinum-Security

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

fatihtokus