#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended

Windows version of http://sourceforge.net/projects/sshpass/
Proof-of-concept exploit for CVE-2026-0073, an Android ADB authentication bypass allowing network attackers to connect to devices with ADB over TCP…

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset

F5 BIG-IP RCE exploitation (CVE-2022-1388)

High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)

PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…


ADCS cert template modification and ACL enumeration

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

Create local administrators in Windows using the SAMR API. In C#, Crystal, Python, Rust, Golang, Nim and Deno (Javascript)

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

Perl cryptographic toolkit providing symmetric ciphers, AEAD modes, hash functions, MACs, public-key cryptography, key derivation, and secure random…

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)

Self-hosted email alias masking service using Postfix and Telegram bot to create disposable addresses for signups, with full control over email…

User-friendly Lightweight TPM Remote Attestation over Bluetooth

Fortinet FortiClientEMS improper access control

Collection of tools to use with Azure Applications

Industrial-grade secure snippet warehouse for your system tray. 📦 Built with Rust (Tauri v2) & React. Offline-first, AES-256 encrypted, and…