Tools

ne0zer01/cve-2024-27198_lab

Docker-based lab for CVE-2024-27198 TeamCity authentication bypass. Includes exploit reproduction, IoC hunting with Sigma/Suricata rules, and…

cybersentinel321/cve-2023-22515-lab

Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment.

he-ewo/cve-2022-22978

Reproducible lab environment demonstrating CVE-2022-22978 Spring Security authorization bypass via encoded newline characters in RegexRequestMatcher.

lem0n817/cve-2025-29927

Local testing environment for Next.js middleware authorization bypass vulnerability (CVE-2025-29927). Demonstrates exploitation via crafted…

csandker/azure-accesspermissions

PowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…

rohansx/wardn

credential isolation for AI agents. Agents never see real API keys - structural guarantee, not policy.

azu/nextjs-cve-2025-29927-poc

Next.js PoC for CVE-2025-29927

shoucheng3/apache__jspwiki_cve-2022-46907_2-11-3

Exploit module for Apache JSPWiki CVE-2022-46907, targeting a Java-based wiki platform with JAAS security integration. Provides vulnerability…

shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1

OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…

synacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

ethan-repo-lab4b6/cve-2022-36537

Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…

renich/pared

Lightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.

themehackers/cve-2025-29972

CVE-2025-29927 is a critical security vulnerability affecting Next.js, a popular React framework for building full-stack web applications. This flaw…

maalfer/cve-2024-10924-poc

Bypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.

th-secforge/cve-2025-29972

CVE-2025-29927 - Critical Security Vulnerability in Next.js

lequoca/fortinet-fortiweb-cve-2025-64446-58034

Security research on Fortinet FortiWeb vulnerabilities (CVE-2025-64446, CVE-2025-58034)

shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8

High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…