#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
joesmithjaffa/cve-2017-14322CVE-2017-14322 Interspire Email Marketer (emailmarketer) Exploit
7ragnarok7/cve-2021-3754Vulnerability details and exploit for CVE-2021-3754
st4rburn/public-passwdUse CVE-2026-46333 and CVE-2026-31431 to change any user's password.
placeos/authPlaceOS authentication service and API gatekeeper.
renatoalencar/dlink-dir610-exploitsExploits for CVE-2020-9376 and CVE-2020-9377
imuspirit/cve-2023-51467CVE-2023-51467 POC
trivulzianus/tarantubenchThe full repo of all the labs available as part of the benchmark
randomrobbiebf/cve-2024-10924Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass
shivam-bathla/cve-2026-24061-setupDocker setup for CVE-2026-24061
al1ex/alibab-nacos-unauthorized-reset-pwdAlibab-Nacos-Unauthorized-Reset PWD
henry4e36/cve-2022-33174Powertek PDU身份绕过
hakaioffsec/cve-2026-16764Python exploit for CVE-2026-16764, a privilege escalation in OWASP DefectDojo where an is_staff REST API bypass lets a low-privileged user gain…
passwa11/cve-2024-27198-rceExploit for JetBrains TeamCity authentication bypass (CVE-2024-27198/27199) enabling remote code execution. Includes dork queries for asset discovery…
murataydemir/cve-2020-14882[CVE-2020-14882] Oracle WebLogic Server Authentication Bypass
himash/cve-2018-19410-pocProof of concept for the vulnerability CVE-2018-19410
gotr00t0day/cve-2022-1388A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit…
fork-bombed/cve-2022-23131CVE-2022-23131 Zabbix Server SAML authentication exploit
jackson5sec/cve-2022-1040This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication
