Autorize
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
authentication-authorizationvulnerability-scannersapi-security-testing+2
1.2k
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
nccgroup/autorepeaterAutomated HTTP Request Repeating With Burp Suite
nccgroup/pmapperA tool for quickly evaluating IAM permissions in AWS.
yubico/libfido2Provides library functionality for FIDO2, including communication with a device over USB or NFC.
cyberark/aclightA script for advanced discovery of Privileged Accounts - includes Shadow Admins
mvelazc0/badzureBadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
crowdstrike/crtAudits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…
northpolesec/santaA binary and file access authorization system for macOS.
heimdal/heimdalImplementation of Kerberos, PKI, and ASN.1/DER providing authentication, authorization, and cryptographic services for secure networks.
netflix/repokidAWS Least Privilege for Distributed, High-Velocity Deployment
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
lithnet/ad-password-protectionActive Directory password filter featuring breached password checking and custom complexity rules
cyberark/kubiscanA tool to scan Kubernetes cluster for risky permissions
foxboron/ssh-tpm-agentSSH agent that creates and manages TPM-sealed keys for hardware-bound authentication, supporting key generation, import, wrapping, PIN protection,…
kviklet/kvikletPull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.
ustayready/credkingPassword spraying using AWS Lambda for IP rotation
cyph/cyphCryptographically secure messaging and social networking service.