Tools

barcrange/cve-2025-0108-authentication-bypass-checker

Python script that tests PAN-OS devices for CVE-2025-0108 authentication bypass by sending crafted HTTP requests and analyzing responses.

aardwolfsecurityltd/bulk_403_bypass

Bash script that adds custom HTTP headers to requests for bulk testing of 403 bypass techniques on web applications.

becodoexploit-mrcat/sapgatebreaker-exploit

SAPGateBreaker is a PoC exploit for CVE-2022-22536, a critical HTTP Request Smuggling vulnerability in SAP NetWeaver. It demonstrates how to bypass…

asdasddqwdq29-a11y/cve-2026-41940

Redacted cPanel/WHM authentication bypass analysis and authorized checker

vincentcox/bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that…

bishopfox/fortiweb-auth-bypass-check

Detects CVE-2025-64446 authentication bypass in FortiWeb by exploiting a path traversal to confirm vulnerability, without administrative actions.

unteikyou/cve-2026-41940-authbypass-detector

Detection tool for cPanel/WHM CVE-2026-41940 (CRLF injection auth bypass). Verify vulnerability on servers you own or have permission to test. For…

elshaheedy/cve-2025-29927-sigma-rule

Sigma rule for detecting CVE-2025-29927 exploitation via suspicious x-middleware-subrequest HTTP headers in Next.js applications, with detection…

knotsecurity/cve-2025-29927-nextjs-middleware-simulation

Simulates CVE-2025-29927, a critical Next.js vulnerability allowing attackers to bypass middleware authorization by exploiting the internal…

trackflaw/cve-2024-10924-wordpress-docker

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

sensepost/cve-2025-64446

A scanner for the FortiNet vulnerability CVE-2025-64446

xtremebeing/starlette-host-header-lab

Starlette Host-Header URL Confusion Lab (X41-2026-002) - CVE-2026-48710

phoscoder/ghost-route

Python-based scanner that detects CVE-2025-29927 middleware bypass vulnerability in Next.js sites by sending a crafted x-middleware-subrequest header…

daftspunk/cve-2021-32648

Provides a manual patch for October CMS authentication bypass vulnerabilities CVE-2021-32648 and CVE-2021-29487 by converting loose to strict…

fr4nc1stein/cve-2025-0108-scan

Detects an authentication bypass vulnerability in Palo Alto PAN-OS (CVE-2025-0108).

ev3rpalestine/0xmiddleware

CVE-2025-29927: Next.js Middleware Exploit

alessandrobertoldi/research

Published security research repository featuring academic papers on domain hijacking, 2FA bypass, and large-scale spoofing techniques, authored by…

chaizeg/csrf-breach

Reproduce CVE-2019-1010054 CSRF vulnerability in Dolibarr 7.0.0 with a Vagrant-based lab environment. Includes detailed walkthrough for password…