#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
owasp/cheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
openssl/opensslGeneral purpose TLS and crypto library
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
drduh/macos-security-and-privacy-guideCurated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…
tailscale/tailscaleThe easiest, most secure way to use WireGuard and 2FA.
dani-garcia/vaultwardenUnofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
gentilkiwi/mimikatzA little tool to play with Windows security
keepassxreboot/keepassxcSecure offline storage of credentials with encrypted vaults, password generator, TOTP, YubiKey/OnlyKey support, browser integration, and CLI.
better-auth/better-authThe most comprehensive authentication framework
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
softethervpn/softethervpnCross-platform multi-protocol VPN server and client supporting SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP with AES-256…
apache/casbinAuthorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…
