Tools

stra-x/outoftune

Rogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…

leosol/initroot

Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass

haingn/lohongcam-cve-2021-33044

Python exploit for Dahua device authentication bypass (CVE-2021-33044). Sends crafted malicious data packets to bypass login and gain unauthorized…

eagle-nett/dahua_auth-bypass-cve-2021-33044

PoC exploit for Dahua authentication bypass (CVE-2021-33044). Scans subnets, tests multiple CVEs, and dumps device configs via crafted cookies…

george0papasotiriou/cve-2026-22005-oauth-2.0-device-code-phishing-short-interval-

Proof-of-concept for CVE-2026-22005 showing OAuth 2.0 device code phishing via too-short polling interval, with vulnerable Flask server and exploit…

ultimatehg/cve-2025-52689-poc

Proof-of-concept exploit for CVE-2025-52689, an authentication bypass in Alcatel-Lucent Enterprise AP1361D Wi-Fi access points, enabling session…

litndat/camera-dahua-research-l-h-ng-cve-2021-33044

PoC exploit for Dahua IP camera authentication bypass (CVE-2021-33044). Includes network scanner, multi-CVE checker, and auth bypass script for…

teteco/cve-2025-67070-intelbras-cftv-mfa-bypass

Proof-of-concept exploit for CVE-2025-67070: MFA bypass in Intelbras NVD 9032 IP CFTV device via password recovery endpoint manipulation, granting…