#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
mikelkarma/cve-2018-11714_pocAn issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker…
sagsooz/cve-2025-29927🔐 Python-based smart scanner for CVE-2025-29927 — Next.js middleware authentication bypass vulnerability. Detects meta refresh, keyword-based…
gmh5225/cve-2025-22963Proof-of-concept exploit for CVE-2025-22963, a CSRF vulnerability in Teedy v1.11 allowing account takeover via user information change endpoint.
vijayshankar22/cve-2017-12542This script checks if an HP iLO server is vulnerable and can add an admin user
saykino/cve-2025-56224Documents an OTP verification bypass vulnerability in Ascertia SigningHub, allowing attackers to brute-force OTP codes and impersonate mobile…
soy-oreocato/cve-2022-33679_checkerLightweight Python checker that tests Active Directory credentials for exposure to CVE-2022-33679 (Kerberos AS-REP roast without pre-authentication).…
yashodhanvivek/agatsa-easytouch-plus---cve-2025-56019This report is for CVE-2025-56019 reserved for Easytouch+product for BLE authentication vulnerability assigned to Discoverer Yashodhan Vivek Mandke.…
frompartsunknown/evilsuncheckThis is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in…
kevinjclark/invoke-linksprayPowershell script to create malicious SMB or WebDAV links to steal NTLM authentication
saykino/cve-2025-56221Advisory detailing CVE-2025-56221, an authentication rate-limiting flaw in Ascertia SigningHub allowing brute-force attacks, with affected versions…
0xblackash/cve-2026-20079CVE-2026-20079
randomrobbiebf/cve-2023-36531LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
alph4sec/ssh_enum_pyscript de enumeración de usuarios SSH basado en diferencias de timing y respuestas de autenticación. Explota el mismo vector que CVE-2018-15473 en…
remenis/cve-2025-56764Username Enumeration in Trivision NC-227WF
randomrobbiebf/cve-2022-1203Content Mask < 1.8.4 - Subscriber+ Arbitrary Options Update
randomrobbiebf/postgres-bruteforcerThis tool takes a list of default creds and tests it against a postgresql server and logs any that work and the databases it has access to.
gmh5225/csrfbrute专为红队行动设计的CSRF登录暴力破解工具，具备动态CSRF Token刷新、多线程并发和会话恢复功能，支持高并发操作和智能重试机制。
uthrasri/openssl_g2.5_newIndustry-standard open-source toolkit implementing SSL/TLS protocols and a comprehensive cryptography library for encryption, decryption, hashing,…
