#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
ovh/the-bastionAuthentication, authorization, traceability and auditability for SSH accesses.
sap/macos-enterprise-privilegesThis application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…
salesforce/policy_sentryGenerates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
ltb-project/self-service-passwordWeb interface to change and reset password in an LDAP directory
davidprowe/badbloodBadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…
freeipa/freeipaCentralizes identity, authentication, and access control for Linux/UNIX environments using LDAP, Kerberos, PKI, DNS, and Active Directory trust.
getprobo/proboOpen source solutions for SOC2, GDPR, and ISO27001
paulsec/awesome-windows-domain-hardeningA curated list of awesome Security Hardening techniques for Windows.
google/longfellow-zkImplementation of the Google Zero-Knowledge library for Identity Protocols.
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
rhinosecuritylabs/cvesProof-of-Concept exploits for CVEs found by the team at Rhino Security Labs
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
mwiede/jschfork of the popular jsch library
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
saml-toolkits/ruby-samlRuby library implementing the SAML Service Provider side of SSO, handling authn requests, response validation, XML signature checks, and IdP metadata…
