Tools

cyberark/aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

compasssecurity/entrafalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

pingidentity/ldapsdk

UnboundID LDAP SDK for Java

fusionauth/fusionauth-samlv2

SAML v2.0 bindings in Java using JAXB

csandker/azure-accesspermissions

PowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…

shanika04/cloudfoundry_uaa

CVE-2016-4468

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

kubernetes-sigs/aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

stra-x/outoftune

Rogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…

synacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

tapanmeena/azpim

A command-line interface tool for managing Azure Privileged Identity Management (PIM) role activations directly from your terminal.

synacktiv/bissap

A new open-source tool to quickly audit SAP permissions.

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

salesforce/cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

davidprowe/badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…

knavesec/credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

nccgroup/pmapper

A tool for quickly evaluating IAM permissions in AWS.