ziti

OpenZiti OpenZiti es una plataforma de redes de confianza cero de código abierto que hace que los servicios de red sean invisibles para los usuarios no autorizados. Cada conexión, ya sea de un usuario, un servicio, un dispositivo o una carga de trabajo, se autentica con identidad criptográfica, s...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

CVE-2022-29464

CVE-2022-29464 WSO2 es un conjunto líder de soluciones SOA que incluye infraestructura relacionada con SOA, marcos técnicos y herramientas asociadas, servidores de procesos, servidores de aplicaciones, etc. Versiones afectadas 2.2.0 ≤ WSO2 API Manager ≤ 4.0.0 5.2.0 ≤ WSO2 Identity Server ≤ 5.11.0...

BloodHound

BloodHound es una aplicación web monolítica compuesta por un frontend React integrado con Sigma.js y un backend de API REST basado en Go. Se despliega con una base de datos de aplicación Postgresql y una base de datos de grafos Neo4j, y es alimentado por los recolectores de datos SharpHound y...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...

AzureAD-Attack-Defense

Microsoft Entra ID - Attack and Defense Playbook This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attac...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium es una solución de red, observabilidad y seguridad con un plano de datos basado en eBPF. Proporciona una red plana simple de Capa 3 con la capacidad de...

CVE-2022-22954-POC

CVE-2022-22954-POC VMware Workspace ONE Access formerly known as VMware Identity Manager aims to allow your employees to access SaaS, web, and native mobile applications faster through multi-factor authentication, conditional access, and single sign-on. Recently, the VMware official website...

boundary

Boundary What is Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Website: https://www.developer.hashicorp.com/boundary/ Forums: HashiCorp Discuss Documentation: https://developer.hashicorp.com/boundary/docs Tutorials: HashiCorp's Learn Platform Boundary is an identity-awa...

gitcolombo

Gitcolombo Herramienta OSINT que extrae identidades — nombres, correos electrónicos y enlaces entre cuentas aparentemente no relacionadas — de repositorios git y GitHub. CLI de Python gitcolombo.py — clona repos, recorre git log y puede llamar a la API de GitHub para señales más ricas. Versión we...

freeipa

FreeIPA Server FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools. FreeIPA is built on top of well known Open Source components and...

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or established identity...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

fulcio

Fulcio A Free-to-Use CA For Code Signing Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity, such as email address. Fulcio only issues short-lived certificates that are valid for 10 minutes. Public Instance Fulcio is in General...

conjur

Conjur Maintainability Test Coverage Conjur proporciona gestión de secretos e identidad de aplicaciones para infraestructura moderna: Machine Authorization Markup Language "MAML" , un lenguaje de políticas de acceso basado en roles para definir componentes del sistema y sus roles, privilegios y...

carbon-identity-framework

carbon-identity-framework Branch| Build Status ---|--- master| This repository contains the core components and features required by the WSO2 Identity Server product. Building from the source If you want to build carbon-identity-framework from the source code: 1. Install Java 21. 2. Install Apach...

hydra

Chat · Discussions · Newsletter · Docs · Try Ory Network · Jobs Ory Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. It connects to your existing identity provider through a login and conse...

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: A silent pairing issue in bluetooth-based contact tracing apps Authors: Jim Mussared George Robotics, Alwen Tiu The Australian National University A vulnerability has been identified in the implementation of the Android version of Australia's COVIDSafe v1.0.17 and earlie...

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

VMWare_CVE-2022-22954

VMWareCVE-2022-22954 CVE-2022-22954 es una vulnerabilidad de inyección de plantillas del lado del servidor en VMware Workspace ONE Access e Identity Manager Resultado de búsqueda en Shodan PoC Síguenos Youtube Twitter...