#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
speytech/c-sentinelSemantic Observability for UNIX Systems - A lightweight C-based system prober with AI-powered analysis
nccgroup/jmxbfA brute force program to test weak accounts configured to access a JMX Registry
opensc/opensc.tokendTokend module for OS X with support for all cards supported by OpenSC
assurancemaladiesec/ad-description-password-finderRetrieve AD accounts description and search for password in it
icemoonhsv/tatsAnalyze and track OAuth 2.0, OIDC, and Microsoft Entra ID tokens from Burp, mitmproxy, or Chrome DevTools captures. Visualize token lifecycles,…
wh0am123/cve-2025-54918-pocPOC for CVE-2025-54918 and a technical demonstration.
dev-2null/kerberosrunA little tool to play with Kerberos.
jazzpizazz/bloodhound.py-kerberosA Python based ingestor for BloodHound
lorenzotullini/influxdb-exploit-cve-2019-20933InfluxDB CVE-2019-20933 vulnerability exploit
pilfer/idictpyA salty-ass 100% verified hacker status python script to turn apple id's into apple crisp #nicememe
epixoip/hmac-bcryptThe hmac-bcrypt password hashing function
rickgeex/proxylogonProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the…
yukselberkay/pmanagerStore and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse…
krixx1337/burner-netZero-trust anti-forensic HTTP client. Wipes secrets. Severs traces. CPR in a Stealth Tank. 👻
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
ammaraskar/github-dev-token-steal-pocProof-of-concept exploit demonstrating a GitHub OAuth token-stealing vulnerability via crafted developer workflow triggers, enabling unauthorized…
