inspec - InSpec: Auditing and Testing Framework

•    Ruby

InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements.InSpec makes it easy to run your tests wherever you need. More options are found in our CLI docs.

a11y - Accessibility audit tooling for the web (beta)

•    Javascript

PhantomJS, which is used for generating the screenshots, is installed automagically, but in some rare cases it might fail to and you'll get an Error: spawn EACCES error. Download PhantomJS manually and reinstall a11y if that happens.

lighthouse - Auditing, performance metrics, and best practices for Progressive Web Apps

•    Javascript

Lighthouse analyzes web apps and web pages, collecting modern performance metrics and insights on developer best practices. Lighthouse is integrated directly into the Chrome Developer Tools, under the "Audits" panel.

arachni - Web Application Security Scanner Framework

•    Ruby

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is able to perform meta-analysis using a number of factors in order to correctly assess the trustworthiness of results and intelligently identify (or avoid) false-positives.

laravel-activitylog - Log activity inside your Laravel app

•    PHP

The spatie/laravel-activitylog package provides easy to use functions to log the activities of the users of your app. It can also automatically log model events. The Package stores all activity in the activity_log table. You can retrieve all activity using the Spatie\Activitylog\Models\Activity model.

inspec - InSpec: Auditing and Testing Framework

•    Ruby

InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements. InSpec makes it easy to run your tests wherever you need. More options are found in our CLI docs.

laravel-auditing - Record the change log from models in Laravel

•    PHP

This package will help you understand changes in your Eloquent models, by providing information about possible discrepancies and anomalies that could indicate business concerns or suspect activities. Laravel Auditing allows you to keep a history of model changes by simply using a trait. Retrieving the audited data is straightforward, making it possible to display it in various ways.

qark - Tool to look for several security related Android application vulnerabilities

•    Python

Quick Android Review Kit - This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs.

EntityAuditBundle - Doctrine2 Extension to Audit Entities through versioning tables.

•    PHP

This extension for Doctrine 2 is inspired by Hibernate Envers and allows full versioning of entities and their associations. The global revision table contains an id, timestamp, username and change comment field.

aircrack-ng - WiFi security auditing tools suite

•    C

Aircrack-ng is a complete suite of tools to assess WiFi network security. All tools are command line which allows for heavy scripting. A lot of GUIs have taken advantage of this feature. It works primarily Linux but also Windows, OS X, FreeBSD, OpenBSD, NetBSD, as well as Solaris and even eComStation 2.

Audit.NET - An extensible framework to audit executing operations in .NET and .NET Core.

•    CSharp

An extensible framework to audit executing operations in .NET including support for .NET Framework ≥ 4.5 and NetCore ≥ 1.0 (NetStandard 1.3). Generate audit logs with evidence for reconstruction and examination of activities that have affected specific operations or procedures.

Mongoaudit - A powerful MongoDB auditing and pentesting tool

•    Python

Mongoaudit not only detects mis-configurations, known vulnerabilities and bugs but also gives you advice on how to fix them, recommends best practices and teaches you how to DevOp like a pro! There are quite a few holes in its default configuration settings. This fact, combined with abundant lazy system administrators and developers, led to what the press has called the MongoDB apocalypse.

css-style-guide-audit - Audit the CSS on a page to see what elements are using styles from the style guide and which styles are overriding them

•    Javascript

Audit the CSS on a page to see what elements are using styles from the style guide and which styles are overriding them. IMPORTANT: Dropbox changed how their Public folder worked and removed all previous links to files hosted in it (which is where the Bookmarklet script is kept). All previous versions (1.0.1 and below) of the bookmarklet will no longer work until you've updated to the latest code.

audit2rbac - Autogenerate RBAC policies based on Kubernetes audit logs

•    Go

audit2rbac takes a Kubernetes audit log and username as input, and generates RBAC role and binding objects that cover all the API requests made by that user.

SharePoint Cross-site Configurator

SharePoint Cross-site Configurator ! {project:description} Microsoft has developed a set of code samples designed to significantly reduce the time and effort required to configure large, cross-site SharePoint deployments. This set of code samples is the SharePoint Cross-Site ...

ObjectComparer

ObjectComparer is a small Microsoft .Net 2.0 library containing classes to run the following Microsoft .Net Reflection based operations on Microsoft .Net objects. 1. Create snapshots of objects 2. Compare snapshots of objects and compare objects 3. Create deep copy of obj...

SQL Power Doc

SQL Power Doc is a collection of Windows PowerShell scripts & modules that discover, document, & diagnose SQL Server instances & their underlying Windows OS.

SQLCAT Community Projects and Code Samples

This project is a place for the SQL CAT team to share their expertise with the community and collaborate with other community members outside Microsoft who wish to contribute code samples to enable more productive use of the SQL Server platform for high-scale,enterprise customers

AutoAudit

T-SQL codegen script that creates audit trail triggers for SQL Server 2005 / 2008. Back-out procs, view to deleted rows, & rowhistroy function. Version 2 adds user context, SQL stmt, insert log, and base table DDL options. by SQL Server MVP Paul Nielsen. 4 yrs of bug fixes.

eyeLog - Database Audit Tool for Microsoft SQL Server

Most of the time, you focus on the implementation of the business requirements. There are a lot of follow up tasks that are not directly asked by the business. Monitoring the activity of a system is one of the tasks that is implictly asked. The goal of eyeLog is to monitor the a