Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools for managing user identities, authentication, authorization, and access controls within systems and networks.

Kitploit recommended

Top tools

10 selected

keycloak

keycloak/keycloak

37.5k7 days ago

authentik

goauthentik/authentik

26.1k1h 17m ago

zitadel

zitadel/zitadel

15.4k14h 15m ago

kratos

ory/kratos

13.8k2 months ago

hydra

ory/hydra

17.6k2 months ago

dex

dexidp/dex

11.2k1 day ago

authelia

authelia/authelia

28.5k10h 59m ago

kanidm

kanidm/kanidm

5.5k9h 13m ago

#10

freeipa

freeipa/freeipa

1.3k3 days ago

#11

pomerium

pomerium/pomerium

5.1k15h 59m ago

Newest Relevance Most popular Recently updated

1033 results

cPanelSniper

ynsmroztas/cpanelsniper

CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection

authentication-authorizationvulnerability-scannersexploitation+6

5085 months ago

bmcweb

openbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

authentication-authorizationcloud-infrastructure-securityembedded-systems-security+6

2302 months ago

CredKing

ustayready/credking

Password spraying using AWS Lambda for IP rotation

password-attacksscripting-automationpenetration-testing+3

6688 years ago

carbon-identity-framework

wso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

authentication-authorizationidentity-managementcloud-security+2

1371 day ago

Grid-Mobile

rezivure/grid-mobile

Grid: Private Location Sharing mobile app for iOS/Android. E2EE with Matrix.

authentication-authorizationosintencryption-decryption-tools+2

53719 days ago

BadZure

mvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

privilege-escalationctfpenetration-testing+6

5171 month ago

EntraFalcon

compasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

vulnerability-scannersinformation-gatheringpenetration-testing+3

45828 days ago

rakkess

corneliusweig/rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

authentication-authorizationcloud-infrastructure-securityconfiguration-auditing+2

1.4k3 years ago

BloodBash

squidsec/bloodbash

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

privilege-escalationvulnerability-analysislateral-movement+6

49816 days ago

iam-vulnerable

bishopfox/iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

privilege-escalationvulnerability-analysispenetration-testing+4

5851 year ago

BARK

bloodhoundad/bark

BloodHound Attack Research Kit

privilege-escalationreconnaissanceexploitation+6

6041 year ago

SecurityExplained

harsh-bothra/securityexplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create…

authentication-authorizationvulnerability-analysismobile-app-pentesting+7

5464 years ago

vcenter_saml_login

horizon3ai/vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

authentication-authorizationcloud-infrastructure-securityprivilege-escalation+4

5294 years ago

AzureADAssessment

azuread/azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

cloud-infrastructure-securitydefensive-toolsconfiguration-auditing+3

8502 years ago

parsec-cloud

scille/parsec-cloud

Open source Dropbox-like file sharing with full client encryption !

authentication-authorizationencryption-decryption-toolscloud-security+1

3082 days ago

cyph

cyph/cyph

Cryptographically secure messaging and social networking service.

authentication-authorizationencryption-decryption-toolsweb-security+3

3774 months ago

ldapsdk

pingidentity/ldapsdk

UnboundID LDAP SDK for Java

authentication-authorizationencryption-decryption-toolsutilities-frameworks+3

3741 day ago

bramble

flythenimbus/bramble

Local-first password manager with direct device-to-device sync

osintpassword-crackingencryption-decryption-tools+7

3034 days ago

Previous 1…789…58 Next