Meta tags:
description=GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.;

Headings (most frequently used words):

aquasecurity, this, security, repositories, saved, searches, navigation, to, your, topic, footer, trivy, openshield, cloud, aws, search, code, users, issues, pull, requests, provide, feedback, misconfiguration, menu, use, filter, results, more, quickly, here, are, 67, public, matching, improve, page, add, repo, tfsec, th3xace, sudo_killer, operator, nickvourd, windows, local, privilege, escalation, cookbook, firefart, stunner, chain, bench, fatihtokus, scan2html, b3rito, yotter, org, vinum, yandex, k3ystr0k3r, droidsniper, badchars, audit, mcp, padok, team, yatas, secshubhamsharma, firesploit, ibrahmsql, cloudvault, jashwanthmu, terrasecure, pol4ir, movementhound, codershiyar, winprivilegeescalation, kloudle, iam, large, account,

Text of the page (most frequently used words):
security (53), code (34), #misconfiguration (27), and (23), issues (23), updated (22), pull (21), #requests (21), star (21), cloud (18), for (15), vulnerability (15), 2026 (13), aws (13), github (12), escalation (12), your (11), scanner (11), privilege (11), tools (11), tool (10), devsecops (9), all (9), the (8), azure (8), you (7), that (7), windows (7), python (7), jul (7), open (7), this (6), more (6), topic (6), misconfigurations (6), kubernetes (6), discussions (6), oscp (6), enterprise (6), view (6), with (5), topics (5), mar (5), cspm (5), iam (5), exploit (5), powershell (5), detection (5), find (5), audit (5), mcp (5), devops (5), source (5), trivy (5), repositories (5), software (5), chain (5), sudo (5), search (5), community (4), access (4), automation (4), html (4), rights (4), ethical (4), team (4), scanners (4), infrastructure (4), vulnerabilities (4), containers (4), supply (4), aquasecurity (4), local (4), platform (4), stars (4), explore (4), support (4), can (3), information (3), manage (3), navigation (3), learn (3), page (3), add (3), developers (3), 2025 (3), management (3), accounts (3), 2024 (3), admin (3), penetration (3), testing (3), user (3), privileges (3), enumeration (3), cybersecurity (3), iac (3), terraform (3), bucket (3), google (3), fix (3), yatas (3), agent (3), pentest (3), android (3), recon (3), yandex (3), compliance (3), cis (3), shell (3), sbom (3), golang (3), turn (3), prep (3), lab (3), cookbook (3), most (3), another (3), tab (3), window (3), refresh (3), session (3), reload (3), sign (3), saved (3), documentation (3), use (3), feedback (3), grade (3), features (3), copilot (3), solutions (3), time (2), not (2), footer (2), repository (2), repo (2), insights (2), large (2), users (2), exploitation (2), escalate (2), development (2), hacking (2), systems (2), hackers (2), researchers (2), test (2), jun (2), movementhound (2), lateral (2), movement (2), bloodhound (2), active (2), directory (2), llm (2), xgboost (2), prevent (2), build (2), powered (2), model (2), dec (2), reconnaissance (2), firebase (2), firesploit (2), helps (2), misconfigured (2), are (2), data (2), public (2), read (2), write (2), secure (2), plugin (2), typescript (2), gcp (2), agents (2), sponsor (2), debug (2), bridge (2), droidsniper (2), quantum (2), cryptography (2), scan (2), openshield (2), bruteforce (2), linux (2), yotter (2), cisa (2), results (2), secrets (2), clouds (2), new (2), stun (2), stunner (2), osep (2), administrator (2), native (2), operator (2), exploits (2), program (2), hacktoberfest (2), tfsec (2), recently (2), fewest (2), forks (2), sort (2), filter (2), language (2), sponsors (2), events (2), collections (2), trending (2), signed (2), appearance (2), settings (2), cancel (2), see (2), available (2), searches (2), business (2), advanced (2), developer (2), resources (2), customer (2), services (2), app (2), perform, action, share, personal, cookies, contact, docs, status, privacy, terms, inc, associate, visit, landing, select, curate, description, image, links, easily, about, improve, load, identity, scale, 20k, bypassing, limitations, account, kloudle, oct, bypass, privilages, research, provides, easy, follow, methods, gaining, newer, how, identify, weak, permissions, common, flaws, perfect, testers, looking, winprivilegeescalation, codershiyar, purple, blue, hound, red, offensive, pentesting, rce, persistence, minimal, extending, legacy, pol4ir, cluade3, haiku, classifier, bedrock, python3, during, terrasecure, jashwanthmu, threat, hunting, bug, bounty, osint, exposed, buckets, blob, storage, cloudvault, ibrahmsql, bugbounty, powerful, databases, exposing, sensitive, scanning, applications, breaches, secshubhamsharma, hardening, audits, padok, server, context, protocol, claude, via, checks, finds, vulns, badchars, remote, execution, unauthenticated, devices, k3ystr0k3r, aug, 2021, requirements, configuration, network, key, logs, vinum, pipeline, post, owasp, unsafe, map, findings, nist, iso27001, soc2, them, one, command, org, nov, 2017, subdomain, brute, subdomainsbrute, attacks, portscanner, gathering, subdomains, portscan, dns, bash, script, performs, then, uses, dirb, discover, directories, might, lead, leakage, 122, b3rito, kev, epss, report, secops, opensource, scans, outputs, interactive, file, 141, scan2html, fatihtokus, policy, vulnera, auditing, stack, based, benchmark, 774, bench, webrtc, over, tcp, servers, 854, firefart, feb, administration, eop, lpe, cmd, cheatsheet, microsoft, nickvourd, octoberfest, toolkit, abuse, journey, cve, ctf, designed, unix, like, takes, advantage, specific, flaw, gain, elevated, system, essentially, allowing, regular, execute, commands, root, sudo_killer, th3xace, static, analysis, linter, digitalocean, now, part, docker, 37k, least, options, php, java, hcl, here, matching, message, dismiss, alert, switched, out, resetting, focus, create, qualifiers, our, query, name, quickly, submit, include, email, address, contacted, every, piece, take, input, very, seriously, provide, syntax, tips, clear, jump, pricing, premium, ons, archive, accelerator, maintainer, programs, fund, partners, trust, center, forum, skills, ebooks, reports, webinars, stories, type, industries, government, manufacturing, financial, healthcare, industry, cases, modernization, case, nonprofits, startups, small, medium, teams, enterprises, company, size, marketplace, changelog, blog, why, stop, leaks, before, they, start, secret, protection, application, changes, review, plan, track, work, instant, dev, environments, codespaces, automate, any, workflow, actions, workflows, integrate, external, registry, direct, from, issue, merge, better, creation, toggle, menu, skip, content,

Text of the page (random words):
misconfiguration github topics github skip to content navigation menu toggle navigation sign in appearance settings platform ai code creation github copilot write better code with ai github copilot app direct agents from issue to merge mcp registry new integrate external tools developer workflows actions automate any workflow codespaces instant dev environments issues plan and track work code review manage code changes application security github advanced security find and fix vulnerabilities code security secure your code as you build secret protection stop leaks before they start explore why github documentation blog changelog marketplace view all features solutions by company size enterprises small and medium teams startups nonprofits by use case app modernization devsecops devops ci cd view all use cases by industry healthcare financial services manufacturing government view all industries view all solutions resources explore by topic ai software development devops security view all topics explore by type customer stories events webinars ebooks reports business insights github skills support services documentation customer support community forum trust center partners view all resources open source community github sponsors fund open source developers programs security lab maintainer community accelerator github stars archive program repositories topics trending collections enterprise enterprise solutions enterprise platform ai powered developer platform available add ons github advanced security enterprise grade security features copilot for business enterprise grade ai features premium support enterprise grade 24 7 support pricing search or jump to search code repositories users issues pull requests search clear search syntax tips provide feedback we read every piece of feedback and take your input very seriously include my email address so i can be contacted cancel submit feedback saved searches use saved searches to filter your results more quickly name query to see all available qualifiers see our documentation cancel create saved search sign in sign up appearance settings resetting focus you signed in with another tab or window reload to refresh your session you signed out in another tab or window reload to refresh your session you switched accounts on another tab or window reload to refresh your session dismiss alert message explore topics trending collections events github sponsors misconfiguration star here are 67 public repositories matching this topic language all filter by language all 67 python 27 go 12 shell 7 html 4 powershell 3 c 2 c 1 hcl 1 java 1 php 1 sort most stars sort options most stars fewest stars most forks fewest forks recently updated least recently updated aquasecurity trivy star 37k code issues pull requests discussions find vulnerabilities misconfigurations secrets sbom in containers kubernetes code repositories clouds and more go docker kubernetes golang security containers iac vulnerability infrastructure as code vulnerability detection hacktoberfest vulnerability scanners security tools devsecops misconfiguration updated jul 16 2026 go aquasecurity tfsec star 7k code issues pull requests discussions tfsec is now part of trivy go aws security digitalocean devops ci azure terraform scanner linter static analysis infrastructure as code compliance google cloud platform hacktoberfest vulnerability scanners devsecops misconfiguration terraform security updated mar 25 2026 go th3xace sudo_killer star 2 5k code issues pull requests a tool designed to exploit a privilege escalation vulnerability in the sudo program on unix like systems it takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system essentially allowing a regular user to execute commands as the root user sudo exploits ctf cve pentest privilege escalation oscp pentest tool linux exploits oscp journey misconfiguration oscp tools oscp prep sudo exploitation abuse sudo updated mar 11 2026 shell aquasecurity trivy operator star 1 9k code issues pull requests discussions kubernetes native security toolkit kubernetes golang security operator cloud native vulnerability detection vulnerability scanners security tools misconfiguration octoberfest updated jul 12 2026 go nickvourd windows local privilege escalation cookbook star 1 4k code issues pull requests windows local privilege escalation cookbook microsoft windows powershell lab administrator cookbook cheatsheet cmd lab automation privilege escalation lpe local privilege escalation oscp eop administrator privileges misconfiguration oscp prep osep local administration osep prep updated feb 5 2026 powershell firefart stunner sponsor star 854 code issues pull requests stunner is a tool to test and exploit stun turn and turn over tcp servers testing security exploit tool stun turn webrtc misconfiguration updated jul 16 2026 go aquasecurity chain bench star 774 code issues pull requests discussions an open source tool for auditing your software supply chain stack for security compliance based on a new cis software supply chain benchmark go golang security cis software supply chain vulnera security tools devsecops misconfiguration open policy agent software supply chain security updated dec 11 2024 go fatihtokus scan2html star 141 code issues pull requests discussions a trivy plugin that scans and outputs the results vulnerabilities misconfigurations secrets sbom in containers kubernetes code repositories clouds and more to an interactive html file security devops opensource cloud containers scan secops iac report vulnerability vulnerability management devsecops misconfiguration cisa sbom trivy epss cisa kev updated jul 16 2026 html b3rito yotter star 122 code issues pull requests yotter bash script that performs recon and then uses dirb to discover directories that might lead to information leakage linux dns directory scanner bruteforce recon portscan subdomains information gathering portscanner bruteforce attacks subdomainsbrute subdomain brute misconfiguration updated nov 30 2017 shell openshield org openshield star 54 code issues pull requests discussions open source cspm for azure scan for misconfigurations and quantum unsafe cryptography map findings to cis nist iso27001 soc2 and fix them with one command python open source owasp compliance post quantum cryptography security scanner security tools cloud security azure security misconfiguration azure devops devsecops pipeline cspm updated jul 18 2026 python vinum security yandex cloud security star 42 code issues pull requests ️ security requirements for yandex cloud configuration iam network access key management kubernetes audit logs security cloud misconfiguration yandex cloud updated aug 30 2021 k3ystr0k3r droidsniper star 16 code issues pull requests droidsniper misconfigured android debug bridge scanner android scanner access recon devices android debug bridge reconnaissance unauthenticated misconfiguration remote code execution misconfigurations updated mar 26 2024 python badchars cloud audit mcp sponsor star 16 code issues pull requests cloud security audit tools for ai agents aws azure gcp misconfiguration detection via mcp 38 tools 60 checks the agent finds vulns not you typescript mcp pentest aws security privilege escalation security automation devsecops claude cloud security azure security misconfiguration gcp security cspm ai tools ai agent cloud audit llm tools model context protocol mcp server iam security updated mar 14 2026 typescript padok team yatas aws star 15 code issues pull requests plugin for yatas that audits aws accounts for misconfiguration and security issues aws security audit hardening misconfiguration yatas updated jul 19 2026 go secshubhamsharma firesploit star 11 code issues pull requests firesploit is a powerful tool for ethical hackers developers and security researchers it helps find and fix misconfigured firebase databases that are exposing sensitive data to the public by scanning for open read write access it helps you secure your applications and prevent data breaches firebase cybersecurity misconfiguration bugbounty tool updated jul 26 2025 python ibrahmsql cloudvault star 11 code issues pull requests aws s3 bucket scanner find exposed s3 buckets azure blob google cloud storage cloud security scanner tool bucket enumeration vulnerability detection aws automation osint azure google cloud cybersecurity penetration testing bug bounty threat hunting ethical hacking devsecops reconnaissance vulnerability scanner cloud security misconfiguration bucket scanner aws s3 scanner updated dec 6 2025 python jashwanthmu terrasecure star 10 code issues pull requests prevent cloud misconfigurations and find vulnerabilities during build time in infrastructure as code powered with xgboost model aws security terraform python3 bedrock iac vulnerability infrastructure as code vulnerability detection vulnerability scanners security tools devsecops misconfiguration xgboost classifier llm cluade3 haiku updated jun 17 2026 python pol4ir movementhound star 8 code issues pull requests powershell tool for active minimal rights lateral movement enumeration extending bloodhound legacy persistence active directory bloodhound cybersecurity enumeration rce pentesting offensive security red team hound blue team misconfiguration purple team lateral movement movementhound updated jun 28 2026 powershell codershiyar winprivilegeescalation star 7 code issues pull requests this repository provides easy to follow methods for gaining admin rights privilege escalation on windows 10 11 and newer systems learn how to identify and exploit misconfigurations weak permissions and common security flaws to escalate user privileges perfect for ethical hackers penetration testers and security researchers looking to test windows 10 penetration testing privilege escalation ethical hacking escalation security research exploit development windows privilege escalation misconfiguration windows security admin rights escalate privilages privilege escalation tool vulnerability exploitation bypass admin rights updated oct 22 2024 html kloudle aws iam large account security star 7 code issues pull requests security insights for aws iam in large scale accounts 20k users bypassing cspm limitations aws iam security scanner security automation cloud security misconfiguration identity access management cspm updated mar 17 2025 load more improve this page add a description image and links to the misconfiguration topic page so that developers can more easily learn about it curate this topic add this topic to your repo to associate your repository with the misconfiguration topic visit your repo s landing page and select manage topics learn more footer 2026 github inc footer navigation terms privacy security status community docs contact manage cookies do not share my personal information you can t perform that action at this time