Identity & Access Management (IAM)

owasp/rbac

PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest…

aker-gateway/aker

SSH bastion/jump host/jumpserver

semperis-community/resetnightmare

POC tool for ResetNightmare (CVE-2026-27912)

volkandindar/agartha

A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It…

openpcc/openpcc

An open-source framework for verifiably private AI inference

lsh123/xmlsec

XML Security Library

dun/munge

Authentication service for creating and validating tamper-proof user credentials in HPC cluster environments, with a portable API and no root…

canyonroad/agentsh

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

flythenimbus/bramble

Offline-first password manager with direct device-to-device sync

rams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

radicle-dev/heartwood

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

zyn3rgy/smbtakeover

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

vectra-ai-research/maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

guardicore/vmware_vcenter_cve_2020_3952

Exploit for CVE-2020-3952 in vCenter 6.7

hzphreak/vminjector

DLL Injection tool to unlock guest VMs

namazso/magicsigner

Signtool for expired certificates

synacktiv/sccmsecrets

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.