Identity & Access Management (IAM)

te-papa/aws-key-disabler

A small lambda script that will disable access keys older than a given amount of days.

nccgroup/pmapper

A tool for quickly evaluating IAM permissions in AWS.

mrash/fwknop

Single Packet Authorization > Port Knocking

9aylas/backdooring-zmm100-fingerprint-devices

AuthBypass & Auto Backdooring Devices

d0ge/sign-saboteur

SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

mvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

nilsteampassnet/teampass

Collaborative Passwords Manager

lithnet/ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules

dbeaver/dbeaver

Free universal database tool and SQL client

cyberark/conjur

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

rams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

davidprowe/badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…

cyberark/skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS

sighupio/permission-manager

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

scille/parsec-cloud

Open source Dropbox-like file sharing with full client encryption !

cyberark/skyark

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS