Discover 12 AI Tools to automate your pentest and cybersecurity audits-3

#AI #tool #pentest #cybersecurity #audit

11. Garak (https://github.com/NVIDIA/garak)
NVIDIA’s tool for red-teaming and probing LLMs, designed to test model safety, robustness, and leakage.
12. Auto Recon LLM (https://github.com/CyberSecurityUP/auto-recon-llm)
Automates the reconnaissance phase using LLMs to interpret recon output and make tactical decisions.

Discover 12 AI Tools to automate your pentest and cybersecurity audits-2

#AI #tool #pentest #cybersecurity #audit

6. Nuclei AI Extension (https://github.com/projectdiscovery/nuclei-ai-extension)
Official extension for Nuclei that uses AI to suggest and create new detection templates from HTTP responses.
7. HackGPT (https://github.com/NoDataFound/hackGPT)
A GPT-powered hacking CLI to assist with payload crafting, bypass techniques, and offensive scripting.
8. AutorizePro (https://github.com/WuliRuler/AutorizePro)
Authorization fuzzing tool with GPT integration to generate smarter test cases and detect access control issues.
9. CloudGPT (https://github.com/ustayready/cloudgpt)
Uses GPT to identify misconfigurations and vulnerabilities in cloud environments like AWS, GCP, and Azure.
10. K8sGPT (https://github.com/k8sgpt-ai/k8sgpt/)
Diagnoses misconfigurations and vulnerabilities in Kubernetes clusters, explained in natural language via LLMs.

Day 12 cont

The #Liberals have a candidate problem continued:

“Liberal #candidate #ScottYung and party officials have declined to answer detailed #questions about whether his use of #Chinese celebrities and a public relations firm in the 2019 #StateElection complied with official #guidelines, as the Liberal party confirms an #audit of campaign disclosures.

A private dinner at a “luxurious venue” in #Sydney to raise #CampaignFunds for Yung, featuring the former Liberal prime minister #TonyAbbott, has also been cancelled without explanation.”

…

“Wishing the talented young Chinese Mr #RongSicheng [Scott Yung] has great success ahead and a boundless future! All the best! I’m #ZhangTielin from #Beijing, #China.”

The cursed Liberal Christian name “Scott” strikes again.

#AusPol / #LNP / #Bennelong / #Kogarah <https://theguardian.com/australia-news/2025/apr/10/nsw-electoral-commission-rules-disclosing-celebrity-endorsements-liberal-candidate-scott-yung-ntwnfb>

" #DOGE appears to have completely eschewed the existing processes for actually rooting out waste, #fraud, and abuse.

“An #audit that follows Generally Accepted Government Auditing Standards (GAGAS)... That is the gold standard for how you audit the #government.”

There are generally five phases of a GAGAS audit, the auditors tell WIRED: planning, evidence gathering, evaluation, reporting, & follow up."
https://www.wired.com/story/federal-auditors-doge-elon-musk/

‘It’s a Heist’: Real Federal Auditors Are Horrified by DOGE

WIRED talked to actual federal auditors about how #government auditing works—and how DOGE is doing the opposite.
https://www.wired.com/story/federal-auditors-doge-elon-musk/

"federal #auditors with years of #experience... say that DOGE’s actions are the furthest thing from what an actual #audit looks like...

“Honestly, comparing real #auditing to what #DOGE is doing, there’s no comparison... None of them are auditors”

Also; if your previous technology choices made this hard... That means a wider discussion to fix it, and don’t let outside people pressure you into compromising on data intregity in systems that need auditing. The bad ones will throw your reputation away anyway if they pressure you to do bad work and it messes up later #databasedesign #DatabaseDevelopers #systemDesign #Accountancy #Audit

The nuance that seems to come up is parent records with child records - ie if you remove the association, the associated child audit entries disappear.

Its easier to see the issue if you remove this type of record keeping to other situations- ie if a foster parent looks after a child, say the kid breaks a leg playing football while under the care of the carer, then the kid moves on…. You’d want to know that both the kid had the accident with the carer and that the carer looked after a kid that had an accident while with them. Both sets of information either end are needed. The accident shouldn’t disappear from the carer’s record.

Yet you hear this from system designers or developers.