#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
randeepajayasekara/cve-2026-20127Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane.
tink-crypto/tinkMulti-language cryptographic library providing AEAD, MAC, digital signature, and hybrid encryption APIs designed to reduce common cryptographic…
zer1t0/ticket_converterA little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.
spiderlabs/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
byt3bl33d3r/mitmfFramework for Man-In-The-Middle attacks
dropbox/securitybotDistributed alerting for the masses!
optiv/talonA password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
markoh17/spray365Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…
jsa2/caopticsCA Optics - Azure AD Conditional Access Gap Analyzer
havocframework/modulesModules used by the Havoc Framework
owasp/passfaultOWASP Passfault evaluates passwords and enforces password policy in a completely different way.
zimedev/certipy-mergedTool for Active Directory Certificate Services enumeration and abuse
securityriskadvisors/mssprayPassword attacks and MFA validation against various endpoints in Azure and Office 365
nuid/nebulousadNebulousAD automated credential auditing tool.
praetorian-inc/tridentautomated password spraying tool
digeex/raiderDEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
quarantyne/quarantyneModern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
