
caos-os
Customer Assurance Operating System. Answer the security questionnaires your customers send you, once.

Customer Assurance Operating System. Answer the security questionnaires your customers send you, once.

Proof-of-concept exploit for CVE-2024-38821, demonstrating authentication bypass in Spring Framework via path traversal to access restricted…

Step-by-step lab writeup demonstrating CVE-2019-20933 InfluxDB authentication bypass via forged JWT tokens, including exploitation,…

Docker-based lab for CVE-2024-27198 TeamCity authentication bypass. Includes exploit reproduction, IoC hunting with Sigma/Suricata rules, and…

Python POC, Exploit for CVE-2026-29000

Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

Exploit for CVE-2023-37582 targeting Apache RocketMQ, a distributed messaging platform with low latency, high throughput, and support for…

Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

Open-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…

Self-hosted SSH access gateway in Go with OIDC/LDAP auth, RBAC, MFA, session recording, audit export, encryption at rest, IP rules, and policy…

Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…

Proof-of-concept exploit for CVE-2024-10924, an authentication bypass vulnerability in the Really Simple Security WordPress plugin, enabling MFA…

Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…

Reproducible lab environment demonstrating CVE-2022-22978 Spring Security authorization bypass via encoded newline characters in RegexRequestMatcher.