#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
asterisk/asteriskThe official Asterisk Project repository.
pritunl/pritunlProvides distributed enterprise VPN connectivity using OpenVPN, with centralized management, authentication, and encrypted tunnels for cloud and…
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
drk1wi/modlishkaModlishka. Reverse Proxy.
opensc/openscOpen source smart card tools and middleware. PKCS#11/MiniDriver
freeradius/freeradius-serverHigh-performance multi-protocol AAA server for RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, centralizing network authentication, authorization, and…
legrandin/pycryptodomeA self-contained cryptographic library for Python
hackplayers/evil-winrmThe ultimate WinRM shell for hacking/pentesting
spiffe/spireWorkload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
supabase/authA JWT based API for managing users and issuing JWT tokens
99designs/aws-vaultA vault for securely storing and accessing AWS credentials in development environments
dirkjanm/krbrelayxKerberos relaying and unconstrained delegation abuse toolkit
boltgolt/howdy🛡️ Windows Hello™ style facial authentication for Linux
ghostpack/rubeusTrying to tame the three-headed dog.
