#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
gitlab-org/ruby/gems/declarative-policyDeclarative authorization library with a DSL for writing policy rules, conditions, and caching. Enables scalable, DRY permission management for Ruby…
kit-lang/packages/kit-policyA flexible, composable authorization framework for Kit (inspired by Action Policy)
kit-lang/packages/kit-oauthOAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…
cosignet/sdkThin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
mandiant/adfsdumpDumps AD FS signing keys, token certificates, and relying-party configuration, enabling forged federated authentication tokens for red-team…
netwrix/pingcastlecloudAudit program for AzureAD
vmware-archive/lightwaveIdentity services for traditional infrastructure, applications and containers.
thomaspatzke/burp-sessionauthtoolBurp plugin which supports in finding privilege escalation vulnerabilities
dodge-mptc/cve-2023-35794-webssh-hijackingRepository contains description for CVE-2023-35794 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom.
grails/gssc-cve-2022-41923Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…
matrix-org/synapseSynapse: Matrix homeserver written in Python/Twisted.
fadi002/unshackleOpen-source tool to bypass windows and linux passwords from bootable usb
csandker/azure-accesspermissionsPowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…
