Otseca
Open source security auditing tool to search and dump system configuration. Introduction Description Requirements Output Parameters Reports How it works Other Created by trimstray and contributors The main goal The main assumption of creating this tool was easier and faster delivery of command sets to be performed on customer environments. As a result of such a scan, the tool aims to gather the most useful information about system components for penetration tests and audits. For whom Otseca facilitates the collection of important information about a system, making it useful for system administrators, security researchers, security professionals, pentesters, and hackers. How To Use It's simple: # Clone this repository git clone https://github.com/trimstray/otseca # Go into the repository cd otseca # Install ./setup.sh install # Run the app otseca --ignore-failed --tasks system,network --output /tmp/report symlink to bin/otseca is placed in /usr/local/bin man page is placed in /usr/local/man/man8 Hint If you do not have
FEATURES
SIMILAR TOOLS
A tool that assesses AWS accounts for subdomain hijacking vulnerabilities in Route53 and CloudFront configurations.
A tool for scanning websites with open .git repositories and dumping their content for Bug Hunting/Pentesting Purposes.
A BloodHoundAD Report Engine for Security Teams to identify Active Directory security vulnerabilities and harden common configuration vulnerabilities and oversights.
Scans Alpine base images for vulnerabilities using Multi Stage builds in Docker 17.05
A comprehensive open dictionary of fault injection patterns and predictable resource locations for dynamic application security testing
Tool to identify and understand code-injection vulnerabilities in Windows 7 UAC whitelist system.
Nmap is an essential network scanning tool used for network security auditing and status monitoring.
A utility for testing AWS Lambda functions for SQL Injection vulnerabilities using SQLMap attacks.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.