#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
cyberark/skyarkSkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
nccgroup/pmapperA tool for quickly evaluating IAM permissions in AWS.
nccgroup/autorepeaterAutomated HTTP Request Repeating With Burp Suite
cyberark/aclightA script for advanced discovery of Privileged Accounts - includes Shadow Admins
heimdal/heimdalImplementation of Kerberos, PKI, and ASN.1/DER providing authentication, authorization, and cryptographic services for secure networks.
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
crowdstrike/crtAudits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…
bmarsh9/gappsSecurity compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
microsoft/windowsprotocoltestsuites⭐⭐ Join us at SNIA SDC for the SMB3 IO Lab (September 28 - October 1, 2026), see upcoming Interoperability Events
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
netflix/repokidAWS Least Privilege for Distributed, High-Velocity Deployment
lithnet/ad-password-protectionActive Directory password filter featuring breached password checking and custom complexity rules
foxboron/ssh-tpm-agentSSH agent that creates and manages TPM-sealed keys for hardware-bound authentication, supporting key generation, import, wrapping, PIN protection,…
cyberark/kubiscanA tool to scan Kubernetes cluster for risky permissions
kviklet/kvikletPull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.
franc-pentest/ldeepIn-depth ldap enumeration utility
