OpenIAM

Certbot

Certbot is a free tool for automatically enabling HTTPS on websites using Let's Encrypt certificates.

kube2iam

Redirects EC2 metadata API traffic to a container that retrieves temporary AWS credentials and proxies other calls to the EC2 metadata API.

Trust Direction: An Enabler for Active Directory Enumeration and Trust Exploitation

A blog post explaining the concept of Active Directory Trusts and their enumeration and exploitation

PassBolt

An open-source credential management platform that provides end-to-end encrypted password sharing and storage capabilities for organizations.

Repokid

Repokid uses Access Advisor to remove unused service permissions from IAM roles in AWS.

SUDO_KILLER

A tool for privilege escalation within Linux environments by targeting vulnerabilities in SUDO usage.

CyberArk

CyberArk is an identity security platform that secures human and machine identities through privileged access management, secrets management, and intelligent privilege controls across on-premises, hybrid, and cloud environments.

Airlock Secure Access Hub

Airlock Secure Access Hub is an integrated security platform that combines identity and access management with web application and API protection to secure digital applications while maintaining user experience.

PowerUp

PowerUp aims to be a clearinghouse of common Windows privilege escalation vectors that rely on misconfigurations.