

Zero-trust SSH bastion proxy with Vault-backed key management, RBAC policy enforcement, full session recording, and admin TUI for auditable access to…

A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692

Open-source tool to bypass windows and linux passwords from bootable usb

Audit program for AzureAD

Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.

The next generation encrypted file sharing project

DSC resources to simplify administration of certificates on a Windows Server.

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW

A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass

Python exploit script for CVE-2024-1709, an authentication bypass vulnerability in ConnectWise ScreenConnect. Adds a new administrative user to the…

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php