inspec - InSpec: Auditing and Testing Framework

•    Ruby

InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements.InSpec makes it easy to run your tests wherever you need. More options are found in our CLI docs.

a11y - Accessibility audit tooling for the web (beta)

•    Javascript

PhantomJS, which is used for generating the screenshots, is installed automagically, but in some rare cases it might fail to and you'll get an Error: spawn EACCES error. Download PhantomJS manually and reinstall a11y if that happens.

lighthouse - Auditing, performance metrics, and best practices for Progressive Web Apps

•    Javascript

Lighthouse analyzes web apps and web pages, collecting modern performance metrics and insights on developer best practices. Lighthouse is integrated directly into the Chrome Developer Tools, under the "Audits" panel.

arachni - Web Application Security Scanner Framework

•    Ruby

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is able to perform meta-analysis using a number of factors in order to correctly assess the trustworthiness of results and intelligently identify (or avoid) false-positives.

laravel-activitylog - Log activity inside your Laravel app

•    PHP

The spatie/laravel-activitylog package provides easy to use functions to log the activities of the users of your app. It can also automatically log model events. The Package stores all activity in the activity_log table. You can retrieve all activity using the Spatie\Activitylog\Models\Activity model.

laravel-auditing - Record the change log from models in Laravel

•    PHP

This package will help you understand changes in your Eloquent models, by providing information about possible discrepancies and anomalies that could indicate business concerns or suspect activities. Laravel Auditing allows you to keep a history of model changes by simply using a trait. Retrieving the audited data is straightforward, making it possible to display it in various ways.

inspec - InSpec: Auditing and Testing Framework

•    Ruby

InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements. InSpec makes it easy to run your tests wherever you need. More options are found in our CLI docs.

Windows-Secure-Host-Baseline - Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings

•    HTML

The Windows Secure Host Baseline (SHB) provides an automated and flexible approach for assisting the DoD in deploying the latest releases of Windows 10 using a framework that can be consumed by organizations of all sizes. Formal product evaluations also support the move to Windows 10. The National Information Assurance Partnership (NIAP) and National Institute of Standards and Technology (NIST) oversees evaluations of commercial IT products for use in National Security Systems.

qark - Tool to look for several security related Android application vulnerabilities

•    Python

Quick Android Review Kit - This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs.

EntityAuditBundle - Doctrine2 Extension to Audit Entities through versioning tables.

•    PHP

This extension for Doctrine 2 is inspired by Hibernate Envers and allows full versioning of entities and their associations. The global revision table contains an id, timestamp, username and change comment field.

aircrack-ng - WiFi security auditing tools suite

•    C

Aircrack-ng is a complete suite of tools to assess WiFi network security. All tools are command line which allows for heavy scripting. A lot of GUIs have taken advantage of this feature. It works primarily Linux but also Windows, OS X, FreeBSD, OpenBSD, NetBSD, as well as Solaris and even eComStation 2.

Audit.NET - An extensible framework to audit executing operations in .NET and .NET Core.

•    CSharp

An extensible framework to audit executing operations in .NET including support for .NET Framework ≥ 4.5 and NetCore ≥ 1.0 (NetStandard 1.3). Generate audit logs with evidence for reconstruction and examination of activities that have affected specific operations or procedures.

Hardware-and-Firmware-Security-Guidance - Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance

•    C

This repository provides content for aiding DoD administrators in verifying systems have applied and enabled mitigations for hardware and firmware vulnerabilities such as side-channel and UEFI vulnerabilities. The repository is a companion to NSA Cybersecurity Advisories such as Vulnerabilities Affecting Modern Processors. This repository is updated as new information, research, strategies, and guidance are developed. The following mitigations generally apply to all systems. For specific steps for a particular operating system or vendor product, consult detailed instructions and strategies at Specific Guidance.

css-style-guide-audit - Audit the CSS on a page to see what elements are using styles from the style guide and which styles are overriding them

•    Javascript

Audit the CSS on a page to see what elements are using styles from the style guide and which styles are overriding them. IMPORTANT: Dropbox changed how their Public folder worked and removed all previous links to files hosted in it (which is where the Bookmarklet script is kept). All previous versions (1.0.1 and below) of the bookmarklet will no longer work until you've updated to the latest code.

audit2rbac - Autogenerate RBAC policies based on Kubernetes audit logs

•    Go

audit2rbac takes a Kubernetes audit log and username as input, and generates RBAC role and binding objects that cover all the API requests made by that user.

Mongoaudit - A powerful MongoDB auditing and pentesting tool

•    Python

Mongoaudit not only detects mis-configurations, known vulnerabilities and bugs but also gives you advice on how to fix them, recommends best practices and teaches you how to DevOp like a pro! There are quite a few holes in its default configuration settings. This fact, combined with abundant lazy system administrators and developers, led to what the press has called the MongoDB apocalypse.

SharePoint Cross-site Configurator

SharePoint Cross-site Configurator ! {project:description} Microsoft has developed a set of code samples designed to significantly reduce the time and effort required to configure large, cross-site SharePoint deployments. This set of code samples is the SharePoint Cross-Site ...

ObjectComparer

ObjectComparer is a small Microsoft .Net 2.0 library containing classes to run the following Microsoft .Net Reflection based operations on Microsoft .Net objects. 1. Create snapshots of objects 2. Compare snapshots of objects and compare objects 3. Create deep copy of obj...

SQL Power Doc

SQL Power Doc is a collection of Windows PowerShell scripts & modules that discover, document, & diagnose SQL Server instances & their underlying Windows OS.

SQLCAT Community Projects and Code Samples

This project is a place for the SQL CAT team to share their expertise with the community and collaborate with other community members outside Microsoft who wish to contribute code samples to enable more productive use of the SQL Server platform for high-scale,enterprise customers