#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
underprotection/cve-2020-24030Proof-of-concept for CVE-2020-24030: weak token expiration in ForLogic Qualiex v1/v3 enabling remote unauthenticated privilege escalation and…
renatoalencar/dlink-dir610-exploitsExploits for CVE-2020-9376 and CVE-2020-9377
jpts/cve-2020-1764-pocProof-of-concept exploit for CVE-2020-1764 authentication bypass in Kiali 0.4.0–1.15.0, enabling unauthorized API access via crafted JWT tokens.
zhzyker/cve-2020-11444Nexus 3 越权漏洞利用脚本
al1ex/shiro-basicThis is a simple Shiro-basic project .Just for pentest env
jas502n/gogs_rceExploit for Gogs RCE (CVE-2018-18925) leveraging session forgery and Git hook injection to achieve arbitrary command execution with root privileges.
randomrobbiebf/wordpress-bfBrute Force Wordpress Blogs.
fa1c0n35/vmware_vcenter_cve_2020_3952Exploit for CVE-2020-3952 in vCenter 6.7 https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/
guardicore/vmware_vcenter_cve_2020_3952Exploit for CVE-2020-3952 in vCenter 6.7
nuid/nebulousadNebulousAD automated credential auditing tool.
jas502n/oa-tongda-rceOffice Anywhere网络智能办公系统
eddiejibson/limitrr-phpBetter PHP rate limiting using Redis.
paulsec/awesome-windows-domain-hardeningA curated list of awesome Security Hardening techniques for Windows.
ricardojoserf/cve-2019-19033CVE-2019-19033 description and scripts to check the vulnerability in Jalios JCMS 10 (Authentication Bypass)
nccgroup/sshessionThe SSH Multiplex Backdoor Tool
cyberark/aclightA script for advanced discovery of Privileged Accounts - includes Shadow Admins
ignis-sec/cve-2019-10008ManageEngine Service Desk Plus 10.0 Privilaged account Hijacking
