Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

393 results

CVE-2023-23397

ka7ana/cve-2023-23397

Simple PoC in PowerShell for CVE-2023-23397

authenticationexploitationpenetration-testing+3

403 years ago

CVE-2026-46455

oscerd/cve-2026-46455

Reproducer for CVE-2026-46455 — Apache Camel camel-keycloak missing TokenVerifier.IS_ACTIVE check (expired access tokens accepted)

authenticationcode-analysisexploitation+3

27 days ago

CVE-2018-10933

youkergav/cve-2018-10933

Authentication Bypass in Server Code for LibSSH

authenticationexploitationnetwork-security+2

6 years ago

pentest-guide

voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

authenticationcryptographyeducation+6

2.8k5 years ago

CVE-2026-24061

jacubes/cve-2026-24061

CVE-2026-24061 exploit PoC

authenticationeducationexploitation+3

82321h 39m ago

django_cve_2019_19844_poc

ryu22e/django_cve_2019_19844_poc

PoC for CVE-2019-19844(https://www.djangoproject.com/weblog/2019/dec/18/security-releases/)

authenticationexploitationpenetration-testing+2

1006 years ago

CVE-2022-24342

yuriisanin/cve-2022-24342

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

authenticationexploitationpenetration-testing+3

374 years ago

agentsid-scanner

agentsid-dev/agentsid-scanner

Security scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.

ai-securityapi-security-testingauthentication+7

254 months ago

CVE-2026-53913

oscerd/cve-2026-53913

PoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup — with no required…

authenticationcode-analysisexploitation+3

128 days ago

CVE-2026-40022

oscerd/cve-2026-40022

Reproducer for CVE-2026-40022: Apache Camel camel-platform-http-main authentication bypass on non-root context paths

authenticationexploitationmisconfiguration+3

1 month ago

CVE-2022-25262

yuriisanin/cve-2022-25262

PoC + vulnerability details for CVE-2022-25262 / JetBrains Hub single-click SAML response takeover

authenticationexploitationpenetration-testing+3

174 years ago

CVE-2026-60206

debajyoti0-0/cve-2026-60206

Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.

authenticationexploitationpenetration-testing+2

26 days ago

CVE-2017-7921-EXPLOIT

k3ystr0k3r/cve-2017-7921-exploit

A PoC exploit for CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability.

authenticationexploitationinformation-gathering+3

501 year ago

GenCrushSSTIExploit

geniuszly/gencrushsstiexploit

is a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP

authenticationeducationexploitation+3

81 year ago

CVE-2021-3754

7ragnarok7/cve-2021-3754

Vulnerability details and exploit for CVE-2021-3754

authenticationauthentication-authorizationexploitation+3

11 year ago

CVE-2026-41940

jenderal92/cve-2026-41940

Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded…

authenticationcommand-and-controlexploitation+6

42 months ago

CVE-2026-46376

portbuster1337/cve-2026-46376

CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials

authenticationeducationexploitation+4

2 months ago

magento2-session-reaper-patch

wubinworks/magento2-session-reaper-patch

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a…

authenticationexploitationvulnerability-analysis+2

39 months ago