#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
jas502n/cve-2018-10933libssh CVE-2018-10933
likekabin/cve-2018-10933_sshPython exploit for CVE-2018-10933 that bypasses libssh server authentication and spawns an unauthenticated shell on vulnerable SSH servers.
x41sec/pam_pkcs11pam_pkcs11 Bugfix
joesmithjaffa/cve-2017-14322CVE-2017-14322 Interspire Email Marketer (emailmarketer) Exploit
agwa/git-cryptTransparent file encryption in git
akzedevops/cve-2016-8776frp bypass without account overwrite
kc57/jitbit_helpdesk_auth_bypassUtility to derive the shared secret on a JitBit Helpdesk install which can be used for authentication bypass (CVE-2017-18486)
bongbongco/cve-2012-6066FreeSSHD Remote Authentication Bypass Vulnerability (freeSSHd 2.1.3)
alash3al/wp-allowed-hostsa plugin that protects your wp site from the CVE-2017-8295 vulnerability
homjxi0e/cve-2017-8295-wordpress-4.7.4---unauthorized-password-resetProof-of-concept exploit for CVE-2017-8295, demonstrating unauthorized password reset in WordPress 4.7.4 by intercepting the reset link without prior…
styx00/dnn_cve-2015-2794NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID:…
owasp/rbacPHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest…
irsl/lgosp-pocLG On Screen Phone authentication bypass PoC (CVE-2014-8757)
elevenpaths/latch-plugin-openvpn-asLatch plugin for OpenVPN Access Server enabling two-factor authentication (2FA) to secure VPN connections with time-based one-time passwords (TOTP).
ajinabraham/oauth-request-crafterOAuth Request Crafter
hzphreak/vminjectorDLL Injection tool to unlock guest VMs
