#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended

Proof-of-concept exploit for CVE-2024-5326, a missing authorization vulnerability in the PostX WordPress plugin allowing authenticated attackers to…
Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…

Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…

WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated…

Exploit script for CVE-2022-23131 that bypasses Zabbix SSO authentication by forging JWT tokens, enabling unauthorized admin access to the monitoring…

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…

Pentaho Authentication Bypass CVE-2021-31602

Modifed ver of the original exploit to save some times on password reseting for unprivileged user

Book Store Management System v1.0 - Incorrect Access Control

CVE-2020-10130 - SearchBlox Product before V-9.1 is vulnerable to Business logic bypass

Simulates an attack exploiting CVE-2024-32962 to forge SAML messages and gain unauthorized permissions, demonstrating the vulnerability's impact.

Automated checker-exploit for CVE-2017-5689, scanning Intel AMT panels for authentication bypass and reporting vulnerable IPs.

Agency Toolkit <= 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update

Reproducible lab environment demonstrating CVE-2022-22978 Spring Security authorization bypass via encoded newline characters in RegexRequestMatcher.

Critical vulnerability in next.js : Bypass middleware authentication

vulnerable-nextjs-14-CVE-2025-29927

Repository for CVE-2023-4800 vulnerability.