#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
w01fh4cker/cve-2024-27198-rceCVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4
tomasz-lisowski/swiccA framework for creating smart cards (ICC-based cards with contacts).
jweny/shiro-cve-2020-17523Analysis of two authentication bypass techniques for Apache Shiro (CVE-2020-17523) with a reproducible exploit environment and detailed root cause…
tuskira/ai-agent-gatewayOpen-source gateway that secures, governs, and observes AI agents' MCP tool calls and LLM traffic, with API-key authentication and an admin console…
7hepr0fess0r/adcsdevilcomA C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA server using…
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
sinsinology/cve-2024-29849Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
ibm-security/ibmsecurityIdempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.
saadahla/blockopenhandleBlock any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote memory…
wardgate/wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!
paradoxis/adsyncdump-bofThe ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies.
w01fh4cker/screenconnect-authbypass-rceExploit script for CVE-2024-1708 and CVE-2024-1709 in ConnectWise ScreenConnect, enabling authentication bypass and remote code execution with user…
zephrfish/azureattackkitCollection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information
te-papa/aws-key-disablerA small lambda script that will disable access keys older than a given amount of days.
elastic/dorothySimulates attacker actions in Okta environments to test monitoring and detection capabilities, with modules mapped to MITRE ATT&CK tactics for red…
aurva-io/aiostackAI runtime inventory: discover shadow AI, trace LLM calls
manuelberrueta/flowanalyzerFlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
