Awesome GitHub RepositoriesPermission Auditing Tools

This project is a terminal-based dashboard for managing Kubernetes clusters. It provides a character-based interface that enables real-time monitoring and interactive control of containerized workloads, allowing users to perform administrative tasks such as scaling deployments, viewing logs, and managing port forwarding directly from the command line. The interface is designed for high-speed navigation, utilizing a keyboard-driven command system that maps input sequences to specific operational actions. It maintains an accurate view of the cluster state through asynchronous event polling, ens

Jeesite is a full-stack low-code development framework designed for building enterprise administrative portals using Spring Boot, MyBatis, and Vue. It functions as a comprehensive platform for creating administrative dashboards with integrated role-based access control and organizational data permission systems. The framework distinguishes itself through a combination of automated CRUD code generation and an integrated RAG platform that connects large language models to enterprise data via vector stores. It further incorporates a BPMN-based workflow engine to automate complex business process

DevOps-Bash-tools is a collection of shell scripts and aliases designed to automate cloud infrastructure, container orchestration, and CI/CD pipelines. It provides a comprehensive toolset for managing operational workflows through the command line. The project specializes in automating tasks across multiple platforms, including managing namespaces and secrets in Kubernetes, auditing resources in AWS and GCP, and triggering builds or managing environment variables in GitHub Actions, GitLab CI, and CircleCI. It also includes a toolkit for interacting with container registries to query manifests

LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access. The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system. Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries a

django-extensions is a specialized toolset for the Django framework providing utilities for database visualization, application debugging, development environment management, and custom management command execution. It functions as a collection of tools designed to automate development tasks and inspect the internal state of an application. The project provides a database visualization tool for generating diagrams of data models and comparing schemas to map complex relationships. It also includes a debugging utility to intercept email traffic and audit user permissions to troubleshoot applica

Pacu هو إطار عمل استغلال مصمم لتدقيق واختبار أمان بيئات Amazon Web Services. يعمل كأداة لاختبار اختراق السحابة ومعدد موارد يستخدم لتحديد التكوينات الخاطئة، ورسم خرائط أسطح الهجوم، وتنفيذ مسارات تصعيد الامتيازات. يوفر إطار العمل قدرات متخصصة لعمليات ما بعد الاستغلال والفريق الأحمر، بما في ذلك إنشاء الاستمرارية من خلال الأبواب الخلفية لإدارة الهوية والوصول. يتميز بنظام وحدات قائم على الإضافات يسمح بتطوير مهام مخصصة وتنسيق طلبات API عبر مناطق جغرافية متعددة. يغطي المشروع مجموعة واسعة من أنشطة تدقيق الأمان، بما في ذلك تعداد البنية التحتية، وتسريب البيانات من خدمات التخزين، وتدقيق الهوية. يتضمن أدوات لتنفيذ الكود عن بُعد عبر حقن الحمولة ونصوص بدء التشغيل، بالإضافة إلى قدرات لتعطيل خدمات الكشف وتحليل الحركة الجانبية للشبكة. يدير Pacu مفاتيح المصادقة الخاصة بالهدف وبيانات الجلسة الوصفية باستخدام حاويات معزولة وقاعدة بيانات محلية للحفاظ على الحالة وتقليل طلبات API.

S3Scanner is a security tool for auditing public access and misconfigured permissions across S3-compatible storage providers. It functions as a storage auditor and security scanner designed to identify open buckets, enumerate publicly accessible objects, and exfiltrate data from misconfigured cloud environments. The project is distinguished by its integration with message brokers, allowing it to consume target lists for large-scale cloud infrastructure audits. It also provides utilities for dumping the entire contents of misconfigured buckets to local directories and calculating the total siz