#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
dobybaxter127/nimbus-vestigeA forensic reconstruction engine for cloud and identity incident response.
ignis-sec/cve-2019-10008ManageEngine Service Desk Plus 10.0 Privilaged account Hijacking
haingn/lohongcam-cve-2021-33044Python exploit for Dahua device authentication bypass (CVE-2021-33044). Sends crafted malicious data packets to bypass login and gain unauthorized…
abraxas/bitwarden-cipher-create-aclBitwarden Server v2026.9.2 - High - IDOR - plant decryptable vault items into collections the caller cannot write
alihussainzada/cve-2025-29927-pocPoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes…
ritwick7/sudostampApprove sudo on a Linux workstation with a fingerprint on your Android phone. LAN only; the ECDSA key never leaves the phone's TEE and speaks the…
fa1c0n35/vmware_vcenter_cve_2020_3952Exploit for CVE-2020-3952 in vCenter 6.7 https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/
hackspeak/cve-2026-16232CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing
jenderal92/cve-2026-8732WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
dcollaoa/cve-2024-0012-gui-pocPython script for CVE-2024-0012 / CVE-2024-9474 exploit
0xrlawrence/pribadoZero-knowledge privacy platform for confidential API key management, encrypted vault, and secure chat. Built on Oasis Sapphire TEEs
rabbitsafe/cve-2021-37580Proof-of-concept exploit for Apache ShenYu Admin JWT authentication bypass (CVE-2021-37580). Includes a scanning script to detect vulnerable…
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.
renich/genclaveCentralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…
aancw/polkit-auto-exploitAutomatic Explotation PoC for Polkit CVE-2021-3560
csuribird/cve-2025-2304This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…
ozcanpng/cve-2026-73673Non-destructive PoC and technical write-up for CVE-2026-73673, an unauthenticated firmware-update flaw in Netis NC63 router, with reproduction and…
0xterror/cve-2026-82329-jfrog-artifactory-Exploit PoC for CVE-2026-82329, an authentication bypass in JFrog Artifactory. Demonstrates forging JWT tokens to gain admin access and create a…
