TREVORspray

TREVORspray 2.0 TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! By @thetechr0mancer Installation: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray...

cuddlephish

CuddlePhish 为渗透测试人员打造的武器化多用户浏览器中间人（BitM）攻击工具。该攻击可用于绕过许多高价值 Web 应用的多因素认证。即使在不使用会话令牌的应用中也能生效，因此传统的令牌窃取攻击无法利用这些应用。这是一款社会工程学工具，不会利用目标服务的任何技术缺陷。 快速开始 该工具是一个专门的 Web 服务器，设计运行在 Debian 11 Bullseye Linux 服务器上，并依赖公网 IP 信息来保护管理功能。如果不费一番周折，别指望能在本地测试。 警告：Chromium 不支持 ARM。虽然技术上可以强制使用 ARM 版 Chromium 二进制文件，但会失去...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - Multi-Factor Authentication MFA Bypass Exploit Title: Userlock - Multi-Factor Authentication MFA Bypass Date: 01/11/2023 Exploit Author: Pinar Sadioglu Vendor Homepage: https://www.isdecisions.com/products/userlock/help/ Version: = 11.0.1.40 Tested on:...

CVE-2026-73313

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-73313 XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-73313

XenForo versions before 2.3.13 contain an MFA bypass vulnerability in the passkey TFA provider . During the WebAuthn assertion step, the passkey verification path performs a global credential lookup without validating that the matched credential belongs to the user whose login is pending. This al...

EUVD-2026-72784

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-48558

CVE-2026-48558: SimpleHelp OIDC Authentication Bypass !WARNING This code is provided AS IS for educational and research purposes only. Do not use this PoC on production systems, shared environments, or any unauthorized targets. This exploit demonstrates a critical remote code execution RCE...

joombrute

JoomBrute Modern Joomla auth-attack toolkit J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 Description Joomla credential-attack toolkit covering CMS versions 3, 4, and 5. Six subcommands handle the full attack chain end-to-end: detect - version fingerprint manifest XML → generato...

CVE-2025-3639

CVE-2025-3639 PoC - Liferay Portal/DXP Login Bypass This repository contains a Proof of Concept PoC for CVE-2025-3639 , a login bypass vulnerability in Liferay Portal versions 7.3.0–7.4.3.132 and Liferay DXP various versions from 2024.Q1 to 2025.Q1.6. The PoC demonstrates how an unauthenticated...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Critical Password Reset Vulnerability Discovered by: Theo Cia CVE: CVE-2025-67070 Status: Reported to vendor Date Discovered: November 2025 Impact: Full administrative access via MFA bypass Firmware: V2.800.00IB00C.0.T Build Date: 2022-08-17 Summary A critical...

BIT-JOOMLA-2026-73337 Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2

Joomla! Core - 20260807 - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks...

EUVD-2026-70363

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...

CVE-2026-84831 Mandatory MFA bypass before enrollment

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...

CVE-2026-84831

SEPPmail Secure Email Gateway versions before 15.0.7 create a fully privileged session before mandatory multi-factor authentication enrollment is completed. An attacker who knows the password for an MFA-required but not-yet-enrolled account can access protected functionality without providing a s...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 We access the wordpress website where we will see that it has MFA activated through the vulnerable plugin: We must execute the PoC and provide the access credentials: Automatically, the browser will open using ...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Bypass MFA WordPress - Exploit Lab This repository provides a lab for exploiting the CVE-2024-10924 vulnerability in WordPress, specifically to bypass two-factor authentication MFA and gain access to the WordPress administration panel. Prerequisites To deploy this lab in your...

EUVD-2026-65118

Filament: Multi-factor authentication app can be bypassed when recovery codes are enabled...

EUVD-2026-69555

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php uses AppAuthentication::verifyCode with a used-code cache key derived from both the app authentication secret an...