#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
winmin/cve-2021-3560PolicyKit CVE-2021-3560 Exploitation (Authentication Agent)
sfewer-r7/cve-2026-16232A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.
lirantal/vulnerable-nextjs-14-cve-2025-29927Reproduction environment for CVE-2025-29927, demonstrating Next.js middleware authorization bypass via the x-middleware-subrequest header. Includes…
exfil0/cve-2024-55591-pocA comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability…
watchtowrlabs/mitel-micollab-auth-bypass_cve-2024-41713Proof-of-concept exploit for CVE-2024-41713, demonstrating authentication bypass in Mitel MiCollab leading to arbitrary file read. Includes a Python…
tc4dy/cve-2026-41940-poc-exploitPoC exploit for CVE-2026-41940 targeting cPanel/WHM authentication bypass via CRLF injection. Supports session hijacking, RCE, reverse shell, mass…
horizon3ai/cve-2024-1403Progress OpenEdge Authentication Bypass
fengchenzxc/cve-2020-28148Wi-Fi portal authentication bypass exploit using MAC address spoofing to gain unauthorized network access, demonstrated on enterprise AC and AP…
davidnussio/envsecSecure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)
lay0us/cve-2022-32532Apache Shiro CVE-2022-32532
synacktiv/bissapA new open-source tool to quickly audit SAP permissions.
deepingh0st/cve-2022-22978CVE-2022-22978 Spring-Security bypass Demo
muirlandoracle/cve-2019-17662Exploit code for CVE-2019-17662
synacktiv/kcmapperKcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…
qarait/gate0A small, auditable, terminating, deterministic micro-policy engine
corelight/corelight-clientCorelight Sensor API command-line client
marcgoam/cve-2026-54121-certighostCVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.
virgula0/poc-cve-2018-10933LibSSH Authentication Bypass Exploit using RCE
