Top 6 misconfiguration Open-Source Projects

• trivy

  83 21,804 9.8 Go

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  

Project mention: Cloud Security and Resilience: DevSecOps Tools and Practices | dev.to | 2024-05-01

4. Trivy: https://github.com/aquasecurity/trivy Trivy is a versatile tool that scans for vulnerabilities in your containers, and also checks for vulnerabilities in your application dependencies.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tfsec

  29 6,609 5.2 Go

  Security scanner for your Terraform code

  

Project mention: Cloud Security and Resilience: DevSecOps Tools and Practices | dev.to | 2024-05-01

3. tfsec: https://github.com/aquasecurity/tfsec tfsec uses a suite of security checks to scan your Terraform templates, helping to identify potential security issues before infrastructure is deployed.

• SUDO_KILLER

  8 2,123 8.6 Shell

  A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

• trivy-operator

  2 1,089 9.6 Go

  Kubernetes-native security toolkit

  

• stunner

  4 722 7.3 Go

  Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

• chain-bench

  3 708 4.7 Go

  An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

  

misconfiguration related posts

• Stunner – tool to test and exploit STUN, TURN and TURN over TCP servers

  1 project | news.ycombinator.com | 25 Apr 2022

• Stunner - tool to test and exploit STUN, TURN and TURN over TCP servers.

  1 project | /r/github_trends | 25 Apr 2022

• New tool to exploit TURN servers - create a socks proxy into the internal network

  2 projects | /r/netsec | 15 Apr 2022

• stunner: Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into the internal network behind the server.

  1 project | /r/blueteamsec | 16 Apr 2022

Index

Sponsored

Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com