Auditing Open Source Projects

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Multi-Cloud Security Auditing Tool

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Kubernetes multi-cluster management and publishing platform

Audited (formerly acts_as_audited) is an ORM extension that logs all changes to your Rails models.

Record the change log from models in Laravel

the TCPdump network dissector

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

🛡️ Awesome Cloud Security Resources ⚔️

This repository is no longer maintained, please checkout https://github.com/JamesTGrant/kubectl-debug.

Directory Services Internals (DSInternals) PowerShell Module and Framework

Extensible platform for infrastructure management

grep rough audit - source code auditing tool

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

JaVers - object auditing and diff framework for Java

A Django app that keeps a log of changes made to an object.

🔥 A powerful MongoDB auditing and pentesting tool 🔥

The missing reverse proxy for ssh scp

Ncrack network authentication tool

A Blazing fast Security Auditing tool for Kubernetes

Free Elasticsearch security plugin and Kibana security plugin: super-easy Kibana multi-tenancy, Encryption, Authentication, Authorization, Auditing

A curated list of amazingly awesome CakePHP plugins, resources and shiny things.

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

Auditing for TLS certificates.

Yet another Django audit log app, hopefully the simplest one.

A Suite of Tools written in Python for wireless auditing and security testing.

Linux audit userspace repository

Observations and tips checklist for auditing protocols on multiple chains 🧐

Documentation and scripts to properly enable Windows event logs.

Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

Security Auditor Utility for GraphQL APIs

The best way to scan for weak ssh passwords on your network

A tiny web auditor with strong opinions.

Auditing crates for unsafe code which can be safely replaced

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

An open-source security log auditing & RDP, VNC, SSH bastion platform, online demo: https://door.casvisor.com

Auditing and relabeling cross-distribution Linux wheels.

A curated list of smart contract attack vectors

:unicorn: A sample template with guidelines for writing technical articles.

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

LDAP library for auditing MS AD

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

Python source code auditing and static analysis on a large scale

A curated list of awesome Microsoft Azure Security tools, guides, blogs, and other resources.

This repository contains a list of the most popular and widely used tools in web3 security. If you find any tools missing, you can create a pull request and be a contribute the project.

Hardened Debian GNU/Linux distro auditing

Static code auditing system

Tools for auditing WAFS

A web-based SSH console to execute commands and manage multiple EC2 instances simultaneously running on Amazon Web Services (AWS).

Audit trail with schema versioning for PostgreSQL using transaction-based logging

PSAmsi is a tool for auditing and defeating AMSI signatures.

Modern alternative to dirbuster/dirb

Ecto auditing library that transparently tracks changes and can revert them.

A Solidity smart contract auditing checklist

Find interesting and potentially hazardous commits in git projects

PostgreSQL Cluster performances monitoring and auditing tool