#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…
Tool for Active Directory Certificate Services enumeration and abuse

Penetration tests guide based on OWASP including test cases, resources and examples.

Mind-Maps of Several Things

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Library for SRTP (Secure Realtime Transport Protocol)

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

LDAP-based Active Directory privilege escalation framework supporting pass-the-hash, pass-the-ticket, and certificate authentication for automated…

JWT brute force cracker written in C

evilginx3 + gophish

Mimikatz implementation in pure Python

Web interface to change and reset password in an LDAP directory

Centralizes identity, authentication, and access control for Linux/UNIX environments using LDAP, Kerberos, PKI, DNS, and Active Directory trust.

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

A tool to perform Kerberos pre-auth bruteforcing

Fast, secure shell protocol built on HTTP/3, QUIC, and TLS 1.3. Supports OAuth2, OpenID Connect, and classical SSH authentication with UDP port…

PowerShell Pass The Hash Utils

Perform a MitM attack and extract clear text credentials from RDP connections