#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
adityatelange/evil-winrm-pyExecute commands interactively on remote Windows machines using the WinRM protocol (just faster)
emerinohdz/facebruteFacebook brute forcer script
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
drduh/macos-security-and-privacy-guideCurated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
drk1wi/modlishkaModlishka. Reverse Proxy.
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
flythenimbus/brambleLocal-first password manager with direct device-to-device sync
blackhatexploitation/exploit-mikrotik-2026CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
softethervpn/softethervpnCross-platform multi-protocol VPN server and client supporting SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP with AES-256…
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
beemdevelopment/aegisA free, secure and open source app for Android to manage your 2-step verification tokens.
modelcontextprotocol/inspectorInspect, debug, and visually test Model Context Protocol (MCP) servers from a web UI, CLI, or TUI, with tool/resource exploration, request logging,…
