#1
pritunl/pritunlProvides distributed enterprise VPN connectivity using OpenVPN, with centralized management, authentication, and encrypted tunnels for cloud and…
hackplayers/evil-winrmThe ultimate WinRM shell for hacking/pentesting
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
freeradius/freeradius-serverHigh-performance multi-protocol AAA server for RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, centralizing network authentication, authorization, and…
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
spiffe/spireWorkload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
supabase/authA JWT based API for managing users and issuing JWT tokens
boltgolt/howdy🛡️ Windows Hello™ style facial authentication for Linux
opensc/openscOpen source smart card tools and middleware. PKCS#11/MiniDriver
ghostpack/rubeusTrying to tame the three-headed dog.
ory/oathkeeperA cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…
ly4k/certipyTool for Active Directory Certificate Services enumeration and abuse
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
imran-parray/mind-mapsMind-Maps of Several Things
