libssh-mirror
libssh/libssh-mirrorC library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…
authenticationcryptographyencryption-decryption-tools+2
54
libssh/libssh-mirrorC library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…
fevra-dev/claimjumperProfessional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k secret wordlist,…
cravaterouge/bloodyadLDAP-based Active Directory privilege escalation framework supporting pass-the-hash, pass-the-ticket, and certificate authentication for automated…
commando-x/vuln-bank-mobileA deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…
zilbonn/owasp-wstg-ragOWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code
saladin0x1/cve-2025-53770Proof-of-concept exploit toolkit for SharePoint ToolPane RCE (CVE-2025-53770) with scanner, payload analysis, and multiple exploitation methods for…
horkimhab/cve-2026-psa-2026-00043-1Proof-of-concept exploit for an unauthenticated root authentication bypass in Proxmox VE 7.0-8.0.3, intended for authorized security testing and…
squamity/cve-2026-8181-pocPython PoC for CVE-2026-8181, a critical authentication bypass in Burst Statistics WordPress plugin. Includes exploit automation, bulk scanning, and…
ajtazer/cve-2025-51471-pocThis PoC is for educational and authorized security testing purposes only. Do NOT use against systems you don't own.
itzvenom/cve-2023-6329Python PoC exploit for CVE-2023-6329 authentication bypass in Control iD iDSecure. Reconstructs admin credentials via predictable password derivation…
karthi-the-hacker/cve-2023-27524Exploit tool for CVE-2023-27524, an authentication bypass vulnerability in Apache Superset. Enables unauthenticated access to Superset instances for…
shoucheng3/apache__jspwiki_cve-2019-10078_2-11-0-m3Exploit module for Apache JSPWiki CVE-2019-10078, enabling security testing of Java-based wiki platforms through targeted vulnerability exploitation…
murrez/cve-2026-8181CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports.…
makarov05bm/wsgoatThe vulnerable application that will teach you how to hack WebSockets
ackemed/cve-2026-1529-poc-keycloak-unauthorized-registration-via-improper-invitation-token-validationExploit tool for CVE-2026-1529, demonstrating unauthorized organization registration in Keycloak via JWT token manipulation. Includes token…
ninjazan420/cve-2025-52691-poc-smartermail-authentication-bypass-exploit-wt-2026-0001CVE-2025-52691 PoC: Based on watchtowr's article WT-2026-0001 about an authentication bypass exploit, this one is a functional Python attack script.
shisones/cve-2025-31161A proof of concept for CVE-2025-31161, using mangled HTTP header to perform unauthenticated impersonation of any user in Crush FTP server.
cipher1x1/cve-2026-29000Proof-of-concept exploit for CVE-2026-29000, an authentication bypass in pac4j-jwt via JWE-wrapped unsigned JWT, enabling privilege escalation.