#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Squid Web Proxy Cache - Source Code

Six Degrees of Domain Admin

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…

Transparent file encryption in git

Authorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.

A JWT based API for managing users and issuing JWT tokens

C# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…

A vault for securely storing and accessing AWS credentials in development environments

Automation to assess the state of your M365 tenant against CISA's baselines

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

🛡️ Windows Hello™ style facial authentication for Linux

A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…

Collaborative Passwords Manager