#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
abraxas/gitea-public-only-pat-orgProof-of-concept lab for a Gitea authorization bypass where a public-only PAT with write:organization creates a private organization via POST…
abraxas/bitwarden-cipher-create-aclBitwarden Server v2026.9.2 - High - IDOR - plant decryptable vault items into collections the caller cannot write
matrix-org/synapseSynapse: Matrix homeserver written in Python/Twisted.
fadi002/unshackleOpen-source tool to bypass windows and linux passwords from bootable usb
mandiant/adfsdumpDumps AD FS signing keys, token certificates, and relying-party configuration, enabling forged federated authentication tokens for red-team…
vmware-archive/lightwaveIdentity services for traditional infrastructure, applications and containers.
authcov/authcovWeb app authorisation coverage scanning
netwrix/pingcastlecloudAudit program for AzureAD
csandker/azure-accesspermissionsPowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…
thomaspatzke/burp-sessionauthtoolBurp plugin which supports in finding privilege escalation vulnerabilities
grails/gssc-cve-2022-41923Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…
dodge-mptc/cve-2023-35794-webssh-hijackingRepository contains description for CVE-2023-35794 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom.
