security-assessment
21 tools and resources
NEW
Zania is an AI-driven platform that automates security and compliance tasks using autonomous agents for security inquiries, compliance assessments, and privacy regulation adherence.
ScubaGear assesses Microsoft 365 tenant configurations against CISA Secure Configuration Baselines, using PowerShell and Open Policy Agent to compare settings and generate compliance reports.
An open source framework for security assessments of iOS apps, now decommissioned in favor of Objection.
Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Multi-cloud OSINT tool for enumerating public resources in AWS, Azure, and Google Cloud.
A reconnaissance tool that retrieves information from Office 365 and Azure Active Directory using a valid credential.
Sysreptor offers a customizable reporting solution for penetration testing and red teaming.
A Live CD and Live USB for penetration testing and security assessment
Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Sysreptor offers a customizable reporting solution for penetration testing and red teaming activities.
Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.
Sysreptor offers a customizable reporting solution for offensive security assessments.
SharpPrinter enables efficient discovery of network printers for security and management purposes.
SharpShares efficiently enumerates and maps network shares and resolves names within a domain.
Sysreptor offers a customizable reporting solution for offensive security assessments.
Sysreptor offers a customizable reporting solution for penetration testing and red teaming.
The Hacker News is a leading cybersecurity news platform providing updates, insights, and information to professionals and enthusiasts in the field.
Exploit that launches a process on the host from within a Docker container run with the --privileged flag by abusing the Linux cgroup v1 “notification on release” feature.
AWS IAM Security Assessment tool for identifying violations of least privilege and generating risk-prioritized reports.
Sysreptor offers a customizable reporting solution for penetration testers and red teamers to streamline their security assessments.
DNSDumpster is a domain research tool for discovering and analyzing DNS records to map an organization's attack surface.