misconfiguration

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

FireSploit is a powerful tool for ethical hackers, developers, and security researchers. It helps find and fix misconfigured Firebase databases that are exposing sensitive data to the public. By scanning for open read/write access, it helps you secure your applications and prevent data breaches.

Prevent cloud misconfigurations and find vulnerabilities during build time in infrastructure as code, powered with XGBoost ML Algorithm.

BeyondTrust Insights research repo.

Local Azure and Entra ID security assessment tool: modular scans of Microsoft Graph and ARM, with a matching local webGUI to review output.

SecretKeeper is a tool for detecting secrets and misconfigurations on your Git repositories (Bitbucket and GitHub).

To Confirm Graphql Api Misconfiguration Bug In Web Application

Automation tools untuk mendeteksi celah misconfig Host Header injection

This script automate exploit only cloud service

Fast scanner for web server security misconfigurations

Global Misconfig Finder (web)

Check public read/list access on cloud storage buckets and enumerate readable files

Fast DNS zone transfer (AXFR) scanner for recon and security testing. Detects misconfigured name servers and exposed DNS data. Supports concurrency, verbose mode, and full zone dumping for efficient enumeration and vulnerability discovery.

Network vulnerability scanner — discovers all devices on a WiFi/LAN and identifies exposed services and misconfigurations

AltaySec Cloud Security Scanner – AWS ortamlarında misconfiguration tespiti yapan, 100 üzerinden risk skoru üreten, read-only bulut güvenliği tarayıcısı.

HTTP header, TLS and port misconfiguration scanner

Multi-cloud security posture scanner for AWS, Azure, and GCP. 27 checks, no dependencies, no credentials needed. CI/CD ready.

Kubernetes security posture scanner — audits manifests and live clusters for misconfigurations against CIS Benchmarks, Pod Security Standards, and the NSA/CISA hardening guide, with SARIF output and remediation guidance.

Linux misconfiguration detection and hardening framework that audits system settings against security best practices (CIS-aligned) and generates actionable remediation recommendations.

Capability-gap diagnostician for locally-served CN open-weights models (DeepSeek/Qwen3/Kimi K3/GLM) — attributes your local model's felt 'dumbness' to a specific misconfiguration layer so you fix one layer, not the whole stack.