authentication-bypass

Star

Here are 31 public repositories matching this topic...

Language:All

Filter by language

All31 Python21 Dockerfile2 C++1 CSS1 HTML1 JavaScript1 PHP1 Shell1 TypeScript1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

Mr-xn /Penetration_Testing_POC

Star7.2k

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

exploit penetration-testing poc rce csrf cve bypass thinkphp cobalt-strike authentication-bypass getshell penetration-testing-poc csrf-webshell sql-poc poc-exp oa-getshell cve-cms php-bypass sql-getshell

UpdatedDec 5, 2025
HTML

AnonKryptiQuz /NextSploit

Star85

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

python automation nextjs hacking penetration-testing anonymous ethical-hacking authentication-bypass vulnerability-scanner security-testing cve-2025-29927 middleware-bypass

UpdatedApr 12, 2025
Python

namreeb /wowned

Star43

Authentication bypass for outdated WoW emulation authentication servers

c-plus-plus exploit memory-hacking srp-6a world-of-warcraft authentication-bypass

UpdatedDec 21, 2017
C++

kljunowsky /CVE-2022-40684-POC

Star15

Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

security exploit penetration-testing poc bugbounty authentication-bypass fortios fortiproxy cve-2022-40684

UpdatedJan 21, 2023
Python

flashnuke /ssh-door

Star14

A stealth SSH backdoor leveraging PAM shared object (.so) injection to bypass authentication and gain SSH access.

linux ssh security backdoor pam cybersecurity pentesting openssh offensive-security pam-module ethical-hacking linux-security authentication-bypass pam-authentication ssh-backdoor

UpdatedMar 7, 2025
Shell

verylazytech /CVE-2024-4358

Star12

Authentication Bypass Vulnerability — CVE-2024–4358 — Telerik Report Server 2024

authentication-bypass cve-2024-4358 poc-cve-2024-4358 telerik-report-server

UpdatedNov 26, 2024
Python

K3ysTr0K3R /CVE-2023-51467-EXPLOIT

Star11

A PoC exploit for CVE-2023-51467 - Apache OFBiz Authentication Bypass

poc ssrf authentication-bypass cve-2023-51467

UpdatedDec 31, 2023
Python

haaris272k /SQL-injection-lab

Star11

This repository contains a basic custom lab environment designed to demonstrate and explore SQL injection vulnerabilities. The lab provides a hands-on learning experience to understand the risks associated with insecure coding practices and the impact of SQL injection attacks on web applications.

open-source security lab sql-injection authentication-bypass

UpdatedSep 20, 2023
Python

f4T1H21 /HackKaradeniz22-Web-CyberCafe

Star11

Hack Karadeniz 2022 CyberCafe sorusu için yazdığım writeup

sql injection boolean sqli sqlmap blind-sql-injection authentication-bypass hackkaradeniz

UpdatedOct 30, 2023
Python

Retr0-code /auth-traversal

Star10

The Vulnerability of GoAhead Service on VStarcam C34S-X4 that allows you to download system.ini configuration file and get login and password.

python camera authentication ip-camera python3 vulnerability path-tracking authentication-bypass goahead vstar 2020 2021 vstarcam authentication-traversal

UpdatedFeb 28, 2021
Python

m3ssap0 /wordpress-really-simple-security-authn-bypass-vulnerable-application

Star8

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!

wordpress vulnerable-application authentication-bypass really-simple-security cve-2024-10924

UpdatedNov 19, 2024
Dockerfile

K3ysTr0K3R /CVE-2024-27198-EXPLOIT

Star6

A PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass

exploit jetbrains scanner poc teamcity exploitation hacked authentication-bypass cve-2024-27198

UpdatedMar 9, 2024
Python

geniuszly /GenBruter

Star5

It is a simple password brute force tool designed for ethical hacking and security testing. Automates the process of selecting passwords for a given user on a website by sending POST requests with different passwords and analyzing the response.

python automation cybersecurity penetration-testing brute-force ethical-hacking security-tools password-cracking authentication-bypass password-security bruter vulnerability-testing gendruter

UpdatedAug 11, 2024
Python

geniuszly /GenDecryptAuthme

Star5

A Python tool for decrypting passwords hashed with the AuthMe SHA256 algorithm. Ideal for penetration testing and security audits on Minecraft servers using the AuthMe authentication plugin.

python minecraft exploit reverse-engineering cybersecurity penetration-testing sha256 decryption ethical-hacking authme security-tools authentication-bypass sha256-hash password-decryption authme-sha256 gendecryptauthme

UpdatedAug 9, 2024
Python

Shivshantp /CVE-2025-2825-CrushFTP-AuthBypass

Star5

Authentication Bypass PoC for CVE-2025-2825 – Exploiting CrushFTP 10.x

proof-of-concept exploit cybersecurity poc rce authentication-bypass crushftp cve-2025-2825

UpdatedJul 22, 2025
Python

516hackers /516-captive-portal-lab

Star4

Intentionally vulnerable captive portal lab for wireless security training. Demonstrates session hijacking, authentication bypass, and network security vulnerabilities. Docker containerized for safe, isolated learning environments. FOR EDUCATIONAL USE ONLY.

penetration-testing web-security captive-portal vulnerability-assessment security-training ethical-hacking network-security authentication-bypass wireless-security session-hijacking

UpdatedOct 6, 2025
Python

contisimone99 /Penetration-Testing-on-Open5Gs

Star4

This repository demonstrates a privilege escalation attack targeting Open5GS's WebUI, exploiting unauthenticated database connections and forged session cookies/JWT tokens. The analysis reveals critical vulnerabilities in authentication mechanisms, offering insights for securing 5G network components.

proof-of-concept privilege-escalation authentication-bypass session-hijacking open5gs

UpdatedJun 12, 2025
Python

nikhilpatidar01 /Web-Application-Penetration-Testing

Star4

🛡️ Web Penetration Testing is the process of testing websites or web apps for security flaws. 🔍 It helps find vulnerabilities like SQL injection, XSS, and authentication bypass. 🚨 Used to protect data, improve security, and prevent hacking attacks.