Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Identity & Access Management (IAM)

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Kitploit recommended

Top tools

10 selected
keycloak preview#1

keycloak

GitHubkeycloak/keycloak
37.6k12h 43m ago
authentik preview#2

authentik

GitHubgoauthentik/authentik
26.2k13h 37m ago
zitadel preview#3

zitadel

GitHubzitadel/zitadel
15.5k1 day ago
kratos preview#4

kratos

GitHubory/kratos
13.8k3 months ago
hydra preview#5

hydra

GitHubory/hydra
17.6k3 months ago
dex preview#6

dex

GitHubdexidp/dex
11.2k3 days ago
authelia preview#7

authelia

GitHubauthelia/authelia
28.5k10h 10m ago
kanidm preview#9

kanidm

GitHubkanidm/kanidm
5.5k1 day ago
freeipa preview#10

freeipa

GitHubfreeipa/freeipa
1.3k2 days ago
pomerium preview#11

pomerium

GitHubpomerium/pomerium
5.1k10h 30m ago
NewestRelevanceMost popularRecently updated
1045 results
nextjs-cve-2025-29927-poc preview

nextjs-cve-2025-29927-poc

GitHubazu/nextjs-cve-2025-29927-poc

Next.js PoC for CVE-2025-29927

authentication-authorizationvulnerability-analysisexploitation+3
151 year ago
Superset_auth_bypass_check preview

Superset_auth_bypass_check

GitHubokaytc/superset_auth_bypass_check

Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具

authentication-authorizationvulnerability-scannersexploitation+3
113 years ago
CVE-2021-3560 preview

CVE-2021-3560

GitHub0dayninja/cve-2021-3560

Polkit D-Bus Authentication Bypass Exploit

authentication-authorizationprivilege-escalationpayload-generation+3
95 years ago
authproof-sdk preview

authproof-sdk

GitHubcommonguy25/authproof-sdk

Cryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.

authentication-authorizationcryptographyidentity-access-management+3
620 days ago
remote-control preview

remote-control

GitHubkatsana/remote-control

Grant remote access to user account without sharing credentials

authentication-authorizationweb-securityutilities-frameworks+2
91 year ago
op4 preview

op4

GitHubopfour/op4

Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…

authentication-authorizationdefensive-toolsencryption-decryption-tools+3
68 days ago
cve-2022-23131-exp preview

cve-2022-23131-exp

GitHubrandom-robbie/cve-2022-23131-exp

Zabbix SSO Bypass

authentication-authorizationvulnerability-analysisexploitation+2
84 years ago
CVE-2022-36537-EXPLOIT preview

CVE-2022-36537-EXPLOIT

GitHubagnihackers/cve-2022-36537-exploit

CVE-2022-36537

authentication-authorizationvulnerability-analysisexploitation+3
93 years ago
CVE-2023-2732 preview

CVE-2023-2732

GitHubrandomrobbiebf/cve-2023-2732

MStore API <= 3.9.2 - Authentication Bypass

authentication-authorizationvulnerability-analysisexploitation+2
63 years ago
CVE-2026-41940 preview

CVE-2026-41940

GitHub0xyur1/cve-2026-41940

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)

authentication-authorizationvulnerability-scannersexploitation+6
95 months ago
CVE-2026-60206-PoC-Exploit preview

CVE-2026-60206-PoC-Exploit

GitHubtc4dy/cve-2026-60206-poc-exploit

👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit…

authentication-authorizationexploit-frameworkspayload-generation+8
421 days ago
otto-support preview

otto-support

GitHubbishopfox/otto-support

An implementation of a vulnerable MCP server using mcp-go

authentication-authorizationprivilege-escalationweb-application-exploitation+5
186 months ago
CVE-2021-32648 preview

CVE-2021-32648

GitHubimmersive-labs-sec/cve-2021-32648

Proof-of-concept exploit for OctoberCMS authentication bypass (CVE-2021-32648), demonstrating unauthorized access and providing a working PoC for…

authentication-authorizationvulnerability-analysisexploitation+2
124 years ago
CVE-2026-24061 preview

CVE-2026-24061

GitHubchocapikk/cve-2026-24061

Proof-of-concept exploit for GNU Inetutils telnetd authentication bypass (CVE-2026-24061) with Docker lab setup and Go PoC. Exploits NEW-ENVIRON…

authentication-authorizationvulnerability-analysisexploitation+4
129 months ago
CVE-2026-29000 preview

CVE-2026-29000

GitHubkernelzeroday/cve-2026-29000

Forge JWE-wrapped unsigned JWTs to bypass pac4j-jwt signature verification (CVE-2026-29000) and authenticate as any user; includes Python CLI,…

authentication-authorizationreconnaissancepayload-generation+5
97 months ago
CVE-2025-47227_CVE-2025-47228 preview

CVE-2025-47227_CVE-2025-47228

GitHubsynacktiv/cve-2025-47227_cve-2025-47228

ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).

authentication-authorizationvulnerability-analysisexploitation+3
101 year ago
fusionauth-samlv2 preview

fusionauth-samlv2

GitHubfusionauth/fusionauth-samlv2

SAML v2.0 bindings in Java using JAXB

authentication-authorizationweb-securitycryptography+2
96 months ago
ranwhat preview

ranwhat

GitHubmatijamiki/ranwhat

Flight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 17 more ran, and flags risky actions and…

defensive-toolsidentity-managementscripting-automation+7
53 days ago
Previous1…212223…59Next