Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Kitploit recommended

Top tools

10 selected

keycloak

keycloak/keycloak

37.5k12h 7m ago

authentik

goauthentik/authentik

26.1k11h 55m ago

zitadel

zitadel/zitadel

15.4k19 hours ago

kratos

ory/kratos

13.8k2 months ago

hydra

ory/hydra

17.6k2 months ago

dex

dexidp/dex

11.2k2 days ago

authelia

authelia/authelia

28.5k19h 48m ago

kanidm

kanidm/kanidm

5.5k1 day ago

#10

freeipa

freeipa/freeipa

1.3k1 month ago

#11

pomerium

pomerium/pomerium

5.1k10h 43m ago

Newest Relevance Most popular Recently updated

1034 results

red-shadow

lightspin-tech/red-shadow

Scans AWS IAM configurations for shadow admins by detecting misconfigured deny policies that fail to restrict user actions on groups, enabling…

cloud-infrastructure-securityvulnerability-scannerspenetration-testing+3

955 years ago

Identity & Access Management (IAM) — Page 55 | Kitploit

SkyWrapper

cyberark/skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS

cloud-infrastructure-securitycloud-securitythreat-intelligence+3

1075 years ago

bludit-CVE-2019-17240

jayngng/bludit-cve-2019-17240

Bypass bludit mitigation login form and upload malicious to call a rev shell

authentication-authorizationpayload-generationexploitation+2

5 years ago

CVE-2021-24085

sourceincite/cve-2021-24085

Proof-of-concept exploit for CVE-2021-24085: CSRF-based elevation of privilege in Microsoft Exchange Server via msExchEcpCanary token forgery,…

authentication-authorizationvulnerability-analysisexploitation+2

715 years ago

shiro-cve-2020-17523

jweny/shiro-cve-2020-17523

Analysis of two authentication bypass techniques for Apache Shiro (CVE-2020-17523) with a reproducible exploit environment and detailed root cause…

authentication-authorizationvulnerability-analysisweb-application-exploitation+3

1185 years ago

Aker

aker-gateway/aker

SSH bastion/jump host/jumpserver

authentication-authorizationcloud-infrastructure-securitynetwork-security+2

5715 years ago

CVE-2020-29669

s1lkys/cve-2020-29669

Macally WIFISD2

authentication-authorizationembedded-systems-securityprivilege-escalation+5

5 years ago

cloudfoundry_uaa

shanika04/cloudfoundry_uaa

CVE-2016-4468

authentication-authorizationcloud-infrastructure-securitycloud-security+3

5 years ago

CVE-2020-14883

b1anda0/cve-2020-14883

Weblogic 身份认证绕过漏洞批量检测脚本

authentication-authorizationvulnerability-scannersexploitation+3

75 years ago

CVE-2020-14882

murataydemir/cve-2020-14882

[CVE-2020-14882] Oracle WebLogic Server Authentication Bypass

authentication-authorizationvulnerability-analysisexploitation+2

35 years ago

CVE-2020-15906

s1lkys/cve-2020-15906

Writeup of CVE-2020-15906

authentication-authorizationpassword-attacksvulnerability-analysis+3

515 years ago

AutoRepeater

nccgroup/autorepeater

Automated HTTP Request Repeating With Burp Suite

authentication-authorizationvulnerability-analysisweb-proxies-interception+4

8946 years ago

CVE-2020-26061

missing0x00/cve-2020-26061

CVE-2020-26061 - ClickStudios Passwordstate Password Reset Portal

authentication-authorizationvulnerability-analysisexploitation+2

6 years ago

Set-ZerologonMitigation

rhymeswithmogul/set-zerologonmitigation

Protect your domain controllers against Zerologon (CVE-2020-1472).

defensive-toolsvulnerability-analysisconfiguration-auditing+2

26 years ago

SFPolDevChk

nccgroup/sfpoldevchk

Salesforce Policy Deviation Checker

cloud-infrastructure-securityconfiguration-auditingcloud-security+2

306 years ago

cve-2020-13933

0xkami/cve-2020-13933

cve-2020-13933 apache shiro权限绕过漏洞

authentication-authorizationvulnerability-analysisexploitation+2

26 years ago

CVE-2020-6287

murataydemir/cve-2020-6287

[CVE-2020-6287] SAP NetWeaver AS JAVA (LM Configuration Wizard) Authentication Bypass (Create Simple & Administrator Java User)

authentication-authorizationvulnerability-analysisexploitation+3

136 years ago

zerologon-CVE-2020-1472

thatonesecguy/zerologon-cve-2020-1472

PoC for Zerologon (CVE-2020-1472) - Exploit

authentication-authorizationprivilege-escalationvulnerability-analysis+3

86 years ago

Previous 1…545556…58 Next