
clients
Bitwarden client apps (web, browser extension, desktop, and cli).

Bitwarden client apps (web, browser extension, desktop, and cli).

Free cross-platform password manager compatible with KeePass

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14…

Simple HS256, HS384 & HS512 JWT token brute force cracker.

Multi-language cryptographic library providing AEAD, MAC, digital signature, and hybrid encryption APIs designed to reduce common cryptographic…

Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim…

Create local administrators in Windows using the SAMR API. In C#, Crystal, Python, Rust, Golang, Nim and Deno (Javascript)

Exploit chain for Flowise 3.0.5: unauthenticated account takeover via password-reset token disclosure (CVE-2025-58434) chained to CustomMCP…

Proof-of-concept exploit demonstrating OTP bypass in One Identity Cloud Access Manager 8.1.3 via MITM/SSL-strip, SAML response replay, and injected…

Proof-of-concept exploit for CVE-2025-26788 demonstrating WebAuthn credential ID manipulation via JavaScript hooking to bypass authentication in…

Serverless AITM Simulation Framework for Entra ID and M365

PoC for CVE-2025-14340: Admin account takeover in Payara Server

WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting