#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
hzphreak/vminjectorDLL Injection tool to unlock guest VMs
cosai-oasis/ws4-secure-design-agentic-systemsRepository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems
iknowjason/purplecloudA little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…
mcw0/dahuaconsoleDahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.
owasp/rbacPHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest…
aker-gateway/akerSSH bastion/jump host/jumpserver
openpcc/openpccAn open-source framework for verifiably private AI inference
lsh123/xmlsecXML Security Library
synacktiv/sccmsecretsSCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
logangoins/sharpsuccessorSharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
cyrusimap/cyrus-saslCyrus SASL API implementation providing client- and server-side authentication and authorization services via pluggable SASL mechanisms per RFC 4422.
radicle-dev/heartwoodPeer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.
volkandindar/agarthaA Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It…
zyn3rgy/smbtakeoverBOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
rams3sh/aaiaAWS Identity and Access Management Visualizer and Anomaly Finder
vectra-ai-research/maad-afMAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
