rakkess
corneliusweig/rakkessReview Access - kubectl plugin to show an access matrix for k8s server resources
authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+2
1.4k
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
corneliusweig/rakkessReview Access - kubectl plugin to show an access matrix for k8s server resources
iknowjason/purplecloudA little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
ovh/the-bastionAuthentication, authorization, traceability and auditability for SSH accesses.
simioni87/auth_analyzerBurp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
firezone/firezoneEnterprise-ready zero-trust access platform built on WireGuard®.
cyph/cyphCryptographically secure messaging and social networking service.
salesforce/policy_sentryGenerates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.
secureworks/whiskeysamlandfriendsPython-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
sap8899/reportlyAzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…
rhinosecuritylabs/iamactionhunterAn AWS IAM policy statement parser and query tool.
gojek/cureiamClean accounts over permissions in GCP infra at scale