
Kerberos-CVE-2026-27912
PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…

PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

Deployable AWS-hosted Active Directory pentest lab with domain controller and vulnerable MSSQL; practice S4U2Self abuse, SQL brute force, and RCE.

POC tool for ResetNightmare (CVE-2026-27912)

Brute Force Wordpress Blogs.

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

Alibab-Nacos-Unauthorized-Reset PWD

CaptainCredz is a modular and discreet password-spraying tool.

Macally WIFISD2

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.

Owa Valid Login Checker

Tool to spray AWS Console IAM Logins

Proof-of-concept exploit for CVE-2024-10508: unauthenticated privilege escalation via password recovery bypass in RegistrationMagic WordPress plugin…

Use CVE-2026-46333 and CVE-2026-31431 to change any user's password.

WordPress Plugin Digits < 8.4.6.1 - OTP Auth Bypass via Bruteforce (CVE-2025-4094)

Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover

Exploit for CVE-2024-48322 targeting RunCodes instances. Retrieves user passwords via email inbox after authentication bypass, requiring only any…

eScan Management Console version 14.0.1400.2281 contains privilege escalation via `GetUserCurrentPwd` function lets attackers retrieve any user's…