#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
cube0x0/nopacCVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
sushegaad/claude-skills-governance-risk-and-complianceInstallable Claude Skills providing expert-level compliance guidance for 30+ frameworks including ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF,…
sigstore/fulcioCertificate authority issuing short-lived code-signing certificates tied to OpenID Connect identities, enabling verifiable software supply chain…
kevin-robertson/powermadPowerShell MachineAccountQuota and DNS exploit tools
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
openwisp/openwisp-controllerNetwork and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and…
mrash/fwknopSingle Packet Authorization > Port Knocking
yubico/libfido2Provides library functionality for FIDO2, including communication with a device over USB or NFC.
scipag/hardeningkittyHardeningKitty - Checks and hardens your Windows configuration
knavesec/credmasterRefactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
pushsecurity/browser-identity-attacks-matrixOffensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they…
cloud-gouv/securixSécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong…
andresriancho/enumerate-iamEnumerate the permissions associated with AWS credential set
in-toto/in-totoProtects software supply chain integrity by verifying each step is performed by authorized functionaries, using signed layout and link metadata.
cyberark/conjurCyberArk Conjur automatically secures secrets used by privileged users and machine identities
semperis/entragoatA deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
merill/awesome-entra😎 Awesome list of all things related to Microsoft Entra
northpolesec/santaA binary and file access authorization system for macOS.
