Skip to content

pablo-nieves-sec/security-scripts

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Security Scripts

A collection of real-world security and IT automation scripts built over 10+ years in cybersecurity. Used in production environments for vulnerability management, endpoint compliance, and security operations.

Scripts

Tenable.io / Vulnerability Management

cveSearch.py - Queries Tenable.io API for specific CVEs. Outputs Plugin ID, Plugin Name, Severity, Vulnerability State, VPR score, and asset count. Great for rapid CVE exposure checks.

TenableIO_exportvulns.py - Exports vulnerability scan results from Tenable.io to a zipped CSV. Filters by asset tags, severity, and date range. Includes VPR scores, exploit availability, CPE, and full asset metadata.

getAssetID.py - Looks up Tenable.io asset records by hostname and exports UUID, FQDN, IP, and OS to CSV. Useful for correlating scan data with asset inventory.

get_cisa_plugins.py - Pulls CISA Known Exploited Vulnerabilities catalog and cross-references against Tenable plugin IDs.

get_cisakEL.py - Retrieves the full CISA KEV list for threat prioritization workflows.

tagAssets.py - Tags assets in Tenable.io for organized scan targeting and reporting.

Endpoint and Device Management

CheckChromeDetectionScript - Detects Chrome installation and configuration status across managed endpoints for compliance reporting.

CheckChromeRemediationScript - Remediates Chrome browser configuration issues on managed endpoints.

Test-WingetUpgrade - PowerShell script that tests Winget package upgrades on Windows endpoints for patch automation workflows.

install_zoom_remotely.py - zsh script for silent remote Zoom installation on macOS via Jamf or MDM. Validates SHA-256 checksum before installing, aborts if the app is running.

get_device_compliance_status - Retrieves device compliance status from endpoint management platforms.

fix_allowed_null_session - Fixes the AllowNullSession registry setting on Windows, closing a common lateral movement vector.

fix_enabled_auto_user_logon - Disables automatic user logon on Windows endpoints, remediating a common credential exposure misconfiguration.

get_asset_principal_name_PS - PowerShell script to retrieve asset principal names from directory services.

update_intune_group - Updates Microsoft Intune device group membership programmatically.

Tech Stack

Python | PowerShell | zsh | Tenable.io API | CISA KEV | Microsoft Intune | Jamf

About

Written by a cybersecurity professional with 10+ years in IT and security. These scripts were built to solve real enterprise problems, not tutorials.

About

Several scripts I've used for security before

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages