espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

smartbrute

Description The smart password spraying and bruteforcing tool for Active Directory Domain Services. ⚠️ This project works. But the filthy coding makes it more PoC than a stable tool. I may or may not rewrite this in the future, but at least you have everything here to work with bruteforce on any...

Zabbix-cve-2022-23131-SSO-bypass

Zabbix-cve-2022-23131-SSO-bypass To bypass the Zabbix SSO login portal,make sure to take the cookie from your browser.Replace it with the one, that is in the script. Make sure to also change the username you wnat to login as and run the exploitmost of the time its going to be "Admin" in Zabbix. N...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML Auth Bypass CVSS 9.9 — SAML authentication bypass in Oracle WebLogic Server Core. Affected: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Authorized security testing only. Install git clone https://github.com/imbas007/CVE-2026-60206.git cd CVE-2026-60206 pip...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

CVE-2026-15469

🔑 CVE-2026-15469 Hard-coded Mesh Group Private Key — TP-Link Deco XE75 / XE5300 / WE10800 A shared RSA-512 mesh group private key is baked into the firmware, letting a LAN-adjacent attacker impersonate a trusted mesh node, overwrite configuration, flash unsigned firmware, and pivot across the...

CVE-2018-15473

CVE-2018-15473 OpenSSH 7.7 - Username Enumeration Method The attacker can try to authenticate a user with a malformed packet for example, a truncated packet, and: if the user is invalid it does not exist, then userauthpubkey returns immediately, and the server sends an SSH2MSGUSERAUTHFAILURE to t...

CVE-2025-29927

CVE-2025-29927: The Next.js Middleware Nightmare This repository is provided strictly for educational purposes only. I did not discover this vulnerability - this is a demonstration and explanation of a publicly disclosed security issue. Using this knowledge to exploit vulnerable systems without...

CVE-2025-29927

Advanced CVE-2025-29927 Vulnerability Scanner This is a professional-grade scanner designed to detect the CVE-2025-29927 middleware bypass vulnerability in Next.js applications. 🧠 What It Does Uses a real headless browser Playwright to deeply crawl a target website JS-rendered content included...

CVE-2019-0708

CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

CVE-2026-36959

CVE-2026-36959: Missing Rate Limiting on Login Endpoint CVE ID: CVE-2026-36959 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-307 - Improper Restriction of Excessive Authentication Attempts Description The U-SPEED Router...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

CVE-2025-60423

Authentication Bypass: 7.2.8 This authentication bypass is similar to Shiro's permission bypass. In the dofilterInternal method of the sessionfilter class, the default dofilter parameter is true, and only when it is false can authentication be bypassed. Following into the matches method, this cod...

CVE-2025-31161

CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit 📌 Description This Python exploit targets CrushFTP servers vulnerable to CVE-2025-31161. The vulnerability allows unauthenticated user account creation by sending a crafted XML payload to the WebInterface, potentially resulting...

CVE-2024-7479_CVE-2024-7481

CVE-2024-7479 & CVE-2024-7481 TeamViewer User to Kernel Elevation of Privilege This repository contains the exploit proof of concept of a vulnerability in TeamViewer that enables an unprivileged user to load an arbitrary Kernel Driver into the system. I would like to thank Zero Day Initiative for...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — CVE-2026-29000 Writeup Disclaimer: This exploit was developed solely for the retired HackTheBox machine "Principal". For educational purposes only. Do not use against systems you do not own or have explicit permission to test. Machine Info Field| Details ---|--- Name| Principal...

Aegis

Aegis Authenticator Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and...