Authentication

checkymander/sharp-smbexec

C# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…

mschwager/route-detect

Find authentication (authn) and authorization (authz) security bugs in web application routes.

horizon3ai/cve-2022-22972

Proof-of-concept exploit for CVE-2022-22972 that bypasses authentication in VMware Workspace ONE, vIDM, and vRealize Automation 7.6 via Host header…

rotarydrone/globalunprotect

Decrypt GlobalProtect configuration and cookie files.

secnigma/cve-2021-3560-polkit-privilege-esclation

Automated Bash PoC for CVE-2021-3560 polkit privilege escalation. Exploits dbus timing attack to inject a sudo user and gain root shell on vulnerable…

ricterz/cve-2021-3560-authentication-agent

PolicyKit CVE-2021-3560 Exploit (Authentication Agent)

passtheticket/cve-2024-38200

CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability

xret2pwn/teamsniper

Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).

ajnik/joomla-bruteforce

Python script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.

rteccybersec/raitrigger

Local SYSTEM auth trigger for relaying

xaaha/hulak

A lightweight, file-based CLI API client with age-encrypted secrets, first-class GraphQL support, and a built-in MCP server for AI agent workflows.

jakobfriedl/tgt-monitor-bof

Async BOF to automatically extract or renew Kerberos TGTs on a target system.

fariszr/knocker

Knocker, a knock based access control service for your homelab

target/strelka-ui

Strelka Web UI for File Submission and Analysis

ashfn/islechat

tiny chat server powered by SSH

ryu22e/django_cve_2019_19844_poc

PoC for CVE-2019-19844(https://www.djangoproject.com/weblog/2019/dec/18/security-releases/)

mhaggis/adtrapper

Hunt Smarter, Hunt Harder