Identity & Access Management (IAM)

katrielmoses/mailaccess

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

umputun/reproxy

Lightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…

bishopfox/iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

rhinosecuritylabs/cves

Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs

corneliusweig/rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

harsh-bothra/securityexplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

bloodhoundad/bark

BloodHound Attack Research Kit

horizon3ai/vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

azuread/azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

scille/parsec-cloud

Open source Dropbox-like file sharing with full client encryption !

rezivure/grid-mobile

Grid: Private Location Sharing mobile app for iOS/Android. E2EE with Matrix.

randomaccess3/awesome-bec

Repository of attack and defensive information for Business Email Compromise investigations

iknowjason/purplecloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…

cosai-oasis/ws4-secure-design-agentic-systems

Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems

mcw0/dahuaconsole

Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.

compasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…