Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
k3ystr0k3r/cve-2026-31816PoC exploit for critical Budibase auth bypass: unanchored webhook regex lets attackers append ?/webhooks/trigger, reach protected APIs, and chain…
oxstussz-eng/kerberos-cve-2026-27912PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…
pemarine/cve-2026-41940-pocExploit for CVE-2026-41940, an unauthenticated authentication bypass in cPanel/WHM that grants root-level WHM access via CRLF session injection, with…
ozcanpng/cve-2026-73673Non-destructive PoC and technical write-up for CVE-2026-73673, an unauthenticated firmware-update flaw in Netis NC63 router, with reproduction and…
quarkslab/android-hardware-attestation-demoAn Android HW Attestation demo
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
matesz44/cve-2026-39987Exploits CVE-2026-39987 pre-auth RCE in Marimo <0.23.0 by connecting to the unauthenticated /terminal/ws WebSocket. Supports arbitrary command…
strategic-automation/violinAgentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…
aliyabuz25/cve-2025-49173Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.
boreas37/cve-2026-41452-pocCVE-2026-41452 — Krayin CRM unauth installer bypass (X-Requested-With) → admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5
ac8999/cve-2026-27344Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
cuteecat/cve-2026-48710CVE-2026-48710漏洞验证代码
yubico/libfido2Provides library functionality for FIDO2, including communication with a device over USB or NFC.
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
neelkotnis/azure-security-auditorCLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption
huzjie/aegisagentRuntime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…
digicred-oss/caos-osCustomer Assurance Operating System. Answer the security questionnaires your customers send you, once.
