Results for “misconfiguration”
32 skills
mukul975 Scanning Kubernetes Manifests With Kubesec
Scan Kubernetes resource manifests with Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
24.6k · bundle
mukul975 Scanning Iac And Images With Trivy
Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.
24.6k · bundle
mukul975 Remediating S3 Bucket Misconfiguration
Identify and remediate Amazon S3 bucket misconfigurations that expose sensitive data, including enabling Block Public Access, auditing policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation with AWS Config and Lambda.
24.6k · bundle
mukul975 Detecting Azure Storage Account Misconfigurations
Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using the azure-mgmt-storage Python SDK.
24.6k · bundle
mukul975 Performing AWS Account Enumeration With Scout Suite
Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.
24.6k · bundle
zhaoxuya520 Identity Federation
Authorized assessment of federated identity systems covering SAML, OIDC, and OAuth2 flows, SSO misconfigurations, and token confusion issues.
12.8k · bundle
More results
affaan-m Security Scan
Audit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.
226k
agentskillexchange Checkov Iac Scanner
Scans infrastructure-as-code files for security and compliance misconfigurations using Checkov, with support for Terraform, Kubernetes, and other formats.
28
zhaoxuya520 Cloud K8S
Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.
12.8k · bundle
galyarderlabs Security
Assess cloud configuration risks including IAM privilege escalation, public storage exposure, network over-permissioning, and infrastructure-as-code misconfigurations.
20 · bundle
mukul975 Performing Authenticated Vulnerability Scan
Run authenticated vulnerability scans using valid credentials to deeply inspect target systems for missing patches, misconfigurations, and security weaknesses.
24.6k · bundle
zhaoxuya520 Database Security
Performs authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
12.8k · bundle
mukul975 Scanning Docker Images With Trivy
Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.
24.6k · bundle
mukul975 Analyzing Active Directory Acl Abuse
Detect dangerous ACL misconfigurations in Active Directory by querying and parsing nTSecurityDescriptor attributes to identify GenericAll, WriteDACL, WriteOwner, and GenericWrite abuse paths.
24.6k · bundle
mukul975 Performing Web Application Scanning With Nikto
Scan web servers and applications for vulnerabilities, misconfigurations, and outdated software using the Nikto open-source scanner.
24.6k · bundle
trailofbits Firebase Apk Scanner
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.
6k · bundle
mukul975 Performing Vulnerability Scanning With Nessus
Conduct authenticated and unauthenticated vulnerability scans using Tenable Nessus to identify known vulnerabilities, misconfigurations, and missing patches, with prioritized remediation guidance.
24.6k · bundle
mukul975 Detecting Misconfigured Azure Storage
Audits Azure Storage accounts for misconfigurations including public blob access, weak network rules, missing encryption, permissive SAS tokens, and disabled logging using Azure CLI, PowerShell, and Defender for Storage.
24.6k · bundle
trailofbits Insecure Defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
6k · bundle
mukul975 Detecting Typosquatting Packages
Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.
24.6k · bundle
alirezarezvani Cloud Security
Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.
20.4k · bundle
mukul975 Performing Active Directory Vulnerability Assessment
Assess Active Directory security posture using PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, and attack vectors.
24.6k · bundle
mukul975 Scanning Containers With Trivy In Cicd
Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.
24.6k · bundle
mukul975 Implementing Aqua Security For Container Scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
24.6k · bundle
sakamoto-family-smile Security Scan
Audits Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield, covering CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
0
galyarderlabs Cloud Security
Assesses cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.
20 · bundle
mukul975 Performing Dns Enumeration And Zone Transfer
Enumerate DNS records, attempt zone transfers, brute-force subdomains, and map DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.
24.6k · bundle
mukul975 Performing Cryptographic Audit Of Application
Systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardcoded keys, insufficient entropy, and protocol misconfigurations.
24.6k · bundle
mukul975 Performing GCP Security Assessment With Forseti
Audit Google Cloud Platform environments for security misconfigurations using Forseti, Security Command Center, and gcloud CLI to evaluate IAM policies, firewall rules, storage permissions, and CIS compliance.
24.6k · bundle
mukul975 Implementing Cloud Vulnerability Posture Management
Continuously monitor cloud infrastructure for misconfigurations, compliance violations, and security risks using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite.
24.6k · bundle
mukul975 Performing Container Security Scanning With Trivy
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
24.6k · bundle
mukul975 Auditing Terraform Infrastructure For Security
Audit Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.
24.6k · bundle