1907 matches found
Zabbix-cve-2022-23131-SSO-bypass
Zabbix-cve-2022-23131-SSO-bypass To bypass the Zabbix SSO login portal,make sure to take the cookie from your browser.Replace it with the one, that is in the script. Make sure to also change the username you wnat to login as and run the exploitmost of the time its going to be "Admin" in Zabbix. N...
CVE-2017-11427-DEMO
CVE-2017-11427-DEMO Basic Environment root@kitploit: $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: root@kitploit: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source...
Zabbix-SAML-SSO-_CVE-2022-23131
This repository does not have a README...
ThunderCloud
ThunderCloud Cloud Exploit Framework Usage root@kitploit: python3 tc.py -h | | | | | / | | | | | | | | | | | | | | | | | | | ' | | | | ' \ / |/ \ '| | | |/ | | | |/ | | | | | | | || | | | | | | / | | || | | || | | | / || ||,|| ||,||| ||/ ,|,| usage: tc.py -h -ce COGNITOENDPOINT -reg...
kviklet
Kviklet Kviklet.dev | Release Notes | Discord Secure access to production environments without impairing developer productivity. Kviklet pronounced Quick-let applies the Four-Eyes Principle to production database access, with a pull request-like review and approval workflow for individual SQL...
gapps
Gapps Gapps is an Security compliance platform that makes it easy to track your progress against various security frameworks. ❄️ View the Gapps site 🏠 Interested in contacting me? Please join our discord Table of Contents 1. Getting Started 2. FAQ New Features ❄️ SOC2, NIST CSF, NIST-800-53, CMMC,...
SSOh-No
SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...
cve-2022-23131-exp
Zabbix SSO Auth Bypass CVE-2022-23131 root@kitploit: usage: zabbixsessionexp.py -h -t TARGET -u USERNAME -p PROXY -f FILES optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Zabbix Server -u USERNAME, --username USERNAME Zabbix Admin User -p PROXY, --proxy...
watchguard-sso-client
Proof of Concept for Watchguard SSO Agent Vulnerabilitites CVE-2024-6592, CVE-2024-6593, CVE-2024-6594 Details are described in our advisories available at: CVE-2024-6592 CVE-2024-6593 CVE-2024-6594 The script requires the Python click library to run. Examples Issue Arbitrary Commands to SSO...
kanidm
Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...
CVE-2019-8978
CVE-2019-8978 Improper Authentication CWE-287 in Ellucian Banner Web Tailor and Banner Enterprise Identity Services Author: Katie Mulliken [email protected] Thanks to: Carnegie Mellon University CERT Coordination Center Information Date Found: Dec. 17, 2018 Vendor: Ellucian Company L.P. Vend...
CVE-2022-39299_PoC_Generator
Exploiting CVE-2022-39299 Signature bypass via multiple root elements Advisory : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Patch : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Base Payload Example Extracted Fro...
CVE-2022-23131
CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Description This script is an exploit for CVE-2022-23131 , a vulnerability in the Zabbix SSO Single Sign-On mechanism. The vulnerability allows an attacker to bypass authentication via a specially crafted zbxsession cookie, giving...
CVE-2025-59718-PoC
CVE-2025-59718 Exploit Wizard Overview This tool is a proof-of-concept PoC exploit script for CVE-2025-59718, a critical authentication bypass vulnerability in Fortinet products e.g., FortiOS, FortiProxy, FortiSwitchManager due to improper verification of cryptographic signatures in SAML messages...
Zabbix-CVE-2022-23131
Zabbix-CVE-2022-23131 Zabbix-SAML-Bypass: CVE-2022-23131 Description: Zabbix is vulnerable to Frontend Authentication Bypass Vulnerability with enabled SAML SSO authentication, due to insecure client-side session storage. On successful exploit of this issue, it allows a malicious actor to escalat...
CVE-2022-23131
CVE-2022-23131 Zabbix - SAML SSO Authentication Bypass Description In the case of instances where the SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor, because a user login stored in the session was not verified. Dork: root@kitploit: shodan-query:...
CVE-2022-23131
CVE-2022-23131 CVE-2022-23131Unsafe Session Storage 0x00 Preface Zabbix vulnerability CVE-2022-23131, I accidentally obtained a Zabbix server of a foreign company. Zabbix Sia Zabbix is an open-source monitoring system developed by Zabbix SIA Zabbix Sia from Latvia. This system supports network...
CVE-2026-53625-GLPI-PoC
CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...
CVE-2021-3754
CVE-2021-3754 This repository documents Vulnerability details and exploit for CVE-2021-3754 discovered and reported by myself on 21st August 2021 Metrics CWE-20: Improper Input Validation CVSS: 5.3 MEDIUM Description A flaw was found in Apache Keycloak & Redhat SSO where an attacker is able to...