Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Identity & Access Management (IAM) — Page 11 | Kitploit
Categories

Identity & Access Management (IAM)

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Kitploit recommended

Top tools

10 selected
keycloak preview#1

keycloak

GitHubkeycloak/keycloak
37.5k15h 20m ago
authentik preview#2

authentik

GitHubgoauthentik/authentik
26.1k20h 56m ago
zitadel preview#3

zitadel

GitHubzitadel/zitadel
15.4k1 day ago
kratos preview#4

kratos

GitHubory/kratos
13.8k2 months ago
hydra preview#5

hydra

GitHubory/hydra
17.6k2 months ago
dex preview#6

dex

GitHubdexidp/dex
11.2k2 days ago
authelia preview#7

authelia

GitHubauthelia/authelia
28.5k14h 48m ago
kanidm preview#9

kanidm

GitHubkanidm/kanidm
5.5k1 day ago
freeipa preview#10

freeipa

GitHubfreeipa/freeipa
1.3k22 days ago
pomerium preview#11

pomerium

GitHubpomerium/pomerium
5.1k19h 44m ago
NewestRelevanceMost popularRecently updated
1035 results
CredSpy preview

CredSpy

GitHubredbyte1337/credspy

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

osintreconnaissanceinformation-gathering+5
16524 days ago
chithi preview

chithi

GitHubchithi-dev/chithi

The next generation encrypted file sharing project

authentication-authorizationencryption-decryption-toolsdata-exfiltration+3
1608 days ago
instagram-private-bypass preview

instagram-private-bypass

GitHubjatin-dot-py/instagram-private-bypass

This repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…

authentication-authorizationvulnerability-analysisinformation-gathering+3
1738 months ago
askWAM preview

askWAM

GitHubdirkjanm/askwam

Ask the Web Account Manager (WAM) for Entra ID tokens

identity-managementpost-exploitationpenetration-testing+5
1641 month ago
DahuaLoginBypass preview

DahuaLoginBypass

GitHubbp2008/dahualoginbypass

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

authentication-authorizationiot-securityvulnerability-analysis+3
1903 months ago
aad-sso-enum-brute-spray preview

aad-sso-enum-brute-spray

GitHubtreebuilder/aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

authentication-authorizationreconnaissancepassword-attacks+3
1935 years ago
OAUTHScan preview

OAUTHScan

GitHubakabe1/oauthscan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

authentication-authorizationvulnerability-scannersapi-security-testing+6
1781 year ago
bpfjailer preview

bpfjailer

GitHubfacebookincubator/bpfjailer

eBPF LSM based Mandatory Access Control and jailer

authentication-authorizationdefensive-toolsprivilege-escalation+3
897 days ago
jit preview

jit

GitHubjitpass/jit

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and…

authentication-authorizationencryption-decryption-toolsconfiguration-auditing+3
16219 days ago
SkyWrapper preview

SkyWrapper

GitHubcyberark/skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS

cloud-infrastructure-securitycloud-securitythreat-intelligence+3
1075 years ago
captaincredz preview

captaincredz

GitHubsynacktiv/captaincredz

CaptainCredz is a modular and discreet password-spraying tool.

password-attackspenetration-testingidentity-access-management+2
1391 year ago
cve-2022-23131 preview

cve-2022-23131

GitHubmr-xn/cve-2022-23131

cve-2022-23131 zabbix-saml-bypass-exp

authentication-authorizationvulnerability-analysisexploitation+2
1544 years ago
talos preview

talos

GitHubory/talos

Scalable API key server for issuing, verifying, and revoking credentials with token derivation for fine-grained capability tokens. Supports…

authentication-authorizationencryption-decryption-toolscloud-security+3
1882 months ago
OA-tongda-RCE preview

OA-tongda-RCE

GitHubjas502n/oa-tongda-rce

Office Anywhere网络智能办公系统

authentication-authorizationpayload-generationvulnerability-analysis+4
1526 years ago
attezt preview

attezt

GitHubfoxboron/attezt

An open-source TPM device-attest-01 CA server

defensive-toolsembedded-systems-securityencryption-decryption-tools+6
7422 days ago
EvilMist preview

EvilMist

GitHublogisek/evilmist

EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…

privilege-escalationreconnaissancevulnerability-analysis+7
1618 months ago
ConditionalAccessDocumentation preview

ConditionalAccessDocumentation

GitHubnicolonsky/conditionalaccessdocumentation

Microsoft Entra Conditional Access Documentation with PowerShell

scripting-automationconfiguration-auditingcloud-security+2
1684 months ago
CVE-2024-27198-RCE preview

CVE-2024-27198-RCE

GitHubw01fh4cker/cve-2024-27198-rce

CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4

authentication-authorizationvulnerability-analysisexploitation+3
1572 years ago
Previous1…101112…58Next