#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
kviklet/kvikletPull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.
nilsteampassnet/teampassCollaborative Passwords Manager
dbeaver/dbeaverFree universal database tool and SQL client
cyberark/conjurCyberArk Conjur automatically secures secrets used by privileged users and machine identities
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
scille/parsec-cloudOpen source Dropbox-like file sharing with full client encryption !
corneliusweig/rakkessReview Access - kubectl plugin to show an access matrix for k8s server resources
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
bastillion-io/bastillionBastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
ovh/the-bastionAuthentication, authorization, traceability and auditability for SSH accesses.
simioni87/auth_analyzerBurp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
firezone/firezoneWireGuard-based zero-trust access platform providing secure, peer-to-peer remote access with granular policy controls, SSO authentication, and audit…
cyph/cyphCryptographically secure messaging and social networking service.
secureworks/whiskeysamlandfriendsPython-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…
volkandindar/agarthaA Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It…
cyberark/kubiscanA tool to scan Kubernetes cluster for risky permissions
