Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Multi-Cloud Security Auditing Tool

Record the change log from models in Laravel

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

A tiny web auditor with strong opinions.

The best way to scan for weak ssh passwords on your network

The missing reverse proxy for ssh scp

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Find interesting and potentially hazardous commits in git projects

For auditing what collaborators, hooks, and deploy keys you have added on all your GitHub repositories.

A Django app that keeps a log of changes made to an object.

Continuous Auditing & Configuration

A simple auditing utility for macOS

Yet another Django audit log app, hopefully the simplest one.

Tracker-enabled DbContext offers you to implement full auditing in your database

Penetration testing and auditing toolkit for Android apps.

Modern alternative to dirbuster/dirb

Wordpress Vulnerability Scanner

Assesses CPU security of embedded devices. #nsacyber

🌲 Configuration flaws detector for Hadoop, MongoDB, MySQL, and more!

Crypto Audit Guidelines

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

KNXnet/IP scanning and auditing tool for KNX home automation installations.

Extensions, Auditing, Concurrency Checks, JSON properties and Transaction Logs for EntityFramework and EFCore

Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber

🐒 A service registry for humans

Python implementation of Benford's Law tests.

Phantom eye——A passive business logic vulnerability auditing tool