Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-23131 — Python exploit for CVE-2022-23131 targeting Zabbix SAML SSO authentication bypass. Includes Shodan and FOFA dorks for vulnerable instance discovery. | Kitploit
Tools/GitHubGitHub/kh4sh3i/cve-2022-23131
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration TestingAuthentication
GitHubkh4sh3i/cve-2022-23131

CVE-2022-23131

Python exploit for CVE-2022-23131 targeting Zabbix SAML SSO authentication bypass. Includes Shodan and FOFA dorks for vulnerable instance discovery.

View Repository
15614 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-23131

Zabbix - SAML SSO Authentication Bypass

Description

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified.

Dork:

root@kitploit:~
shodan-query: http.favicon.hash:892542951
root@kitploit:~
fofa-query: app="ZABBIX-监控系统" && body="saml"

usage

root@kitploit:~
python3 zabbix_session_exp.py  -t https:target.com -u Admin

refrences

  • https://nvd.nist.gov/vuln/detail/CVE-2022-23131
  • https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage
  • https://github.com/Mr-xn/cve-2022-23131
  • https://github.com/projectdiscovery/nuclei-templates
    • Download Tool