nhi-zero-trust-bypass
alexsvobo/nhi-zero-trust-bypassDemonstrates a real-world zero-trust bypass by exploiting BIND CVE-2025-40775 to disrupt DNS, break secret rotation, and expose static credentials in…
cloud-securitydns-analysiseducation+5
5
alexsvobo/nhi-zero-trust-bypassDemonstrates a real-world zero-trust bypass by exploiting BIND CVE-2025-40775 to disrupt DNS, break secret rotation, and expose static credentials in…
unfold-security/cve-2026-41940-detectionDetection signatures for CVE-2026-41940 and shemas for cPanel logs
dz-y/azure-apim-dev-portal-signup-bypassPython script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…
notitssixtyn3in/cve-2025-4172025Security advisory for CVE-2025-4172025: an authentication bypass vulnerability in Copilot enabling unauthorized account access, session hijacking,…
focused.hunts/the.vaultPrivacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your…
ory/oathkeeperA cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…
cyberark/conjurCyberArk Conjur automatically secures secrets used by privileged users and machine identities
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
sudo-wp/sudowp-adminerA secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
wso2/carbon-identity-frameworkCore framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…
flangvik/azurec2relayAzure Function that validates and relays Cobalt Strike beacon traffic using malleable C2 profiles, redirecting invalid requests to a decoy site and…
treebuilder/aad-sso-enum-brute-sprayPOC of SecureWorks' recent Azure Active Directory password brute-forcing vuln
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…
stra-x/outoftuneRogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…
davidnussio/envsecSecure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)
xenom0rph97/cve-2024-30896Proof-of-concept exploit for CVE-2024-30896, a privilege escalation vulnerability in InfluxDB allowing allAccess token holders to gain operator-level…
kubeshark/kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…