#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
savsch/poc_cve-2019-0217Proof-of-concept exploit for CVE-2019-0217, a race condition in Apache HTTP Server's mod_auth_digest allowing authentication bypass. Includes…
sajaljat/cve-2023-46449Proof-of-concept exploit for CVE-2023-46449: IDOR in Sourcecodester inventory management system v1.0 password change function enabling remote account…
bypazs/cve-2023-26984An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted…
outpost24/pyrescom-termod-pocPyrescom Termod proof-of-concept code for CVE-2020-23160, CVE-2020-23161 and CVE-2020-23162
arian91/cve-2025-23369_saml_bypassbypass SAML authentication on GitHub Enterprise
hunt3r850/cve-2024-10924-wordpress-dockerDockerized exploit environment for CVE-2024-10924, an authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1)…
harydhk7/cve-2024-4358Pre-authenticated remote code execution exploit for Telerik Report Server (CVE-2024-4358/CVE-2024-1800) with authentication bypass and…
gunyakit/cve-2024-41713-poc-exploitMitel MiCollab Authentication Bypass to Arbitrary File Read
redfox-security/digisol-dg-gr1321-s-password-policy-bypass-cve-2024-2257Exploit for CVE-2024-2257: bypasses password policy on Digisol DG-GR1321 routers via crafted HTTP request, enabling unauthorized access for…
tamagaft/cve-2019-17662Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit
randomrobbiebf/cve-2024-10728PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
rayngnpc/cve-2022-26923-rayngExploitation for CVE-2022-26923
l1uk/nextjs-middleware-exploitResearch on Next.js middleware vulnerability (CVE-2025-29927) allowing authorization bypass and potential exploits.
giovannidispoto/cve-2017-13872-patchExploit for CVE-2017-13872 that escalates privileges by changing the root password on vulnerable systems. Requires execution and provides new root…
wtn-arny/cve-2024-37085Python exploit for CVE-2024-37085, an authentication bypass in domain-joined ESXi hypervisors, enabling unauthenticated shell upload and full…
0nyx-my7h/cve-2025-43921Proof-of-concept exploit and advisory for CVE-2025-43921, an authentication bypass in GNU Mailman 2.1.39 that allows unauthenticated creation of…
ethancunt/cve-2022-45599Proof-of-concept for CVE-2022-45599: PHP type juggling vulnerability in Aztech WMB250AC router login.php allowing admin authentication bypass via…
nxploited/cve-2024-56071Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation
