Authentication

barcrange/cve-2025-0108-authentication-bypass-checker

Python script that tests PAN-OS devices for CVE-2025-0108 authentication bypass by sending crafted HTTP requests and analyzing responses.

dhammon/hoteldruid-cve-2021-42949

Exploit for CVE-2021-42949 in HotelDruid v3.0.3, demonstrating predictable session token generation and authentication bypass via brute force.

jet-pentest/cve-2020-29667

Proof-of-concept exploit for CVE-2020-29667 targeting insufficient session expiration and a hardcoded cookie value in Lan ATMService M3 ATM…

mufti22/cve-2024-4040

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote…

cy3erdr4g0n/cve-2024-10924

Exploit for CVE-2024-10924, a critical authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1). Allows…

jet-pentest/cve-2020-27747

Possible Account Takeover | Brute Force Ability

dirty-racoon/cve-2018-15473-py3

Python3 exploit for CVE-2018-15473 that enumerates valid usernames on OpenSSH servers via timing-based authentication analysis.

tibrn/cve-2025-30144

Proof-of-concept for CVE-2025-30144: JWT issuer validation bypass in fast-jwt library allowing attackers to forge tokens with array-based iss claims.

arturo-b-cmu/cve-2016-20012

Python script for SSH username enumeration using timing-based analysis to identify valid accounts on a target server.

jet-pentest/cve-2021-3130

Proof-of-concept for CVE-2021-3130: demonstrates credential exposure via HTML obfuscation bypass in Open-AudIT up to 4.0.2, revealing SSH, SNMP, and…

brunosergi/bloodit

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

yzee00/cve-2018-15473

Fix for CVE-2018-15473

starry-lord/cve-2018-0114

Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.

cipolone95/cve-2019-1619

Powershell Script to build token for CVE-2019-1619

sahalll/cve-2024-54916

Frida-based proof-of-concept demonstrating authentication bypass in Telegram Android by hooking SharedConfig.checkPasscode to always return true,…

0xsu3ks/cve-2023-1665

CVE-2023-1665 - Twake App