PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
An ActionScript 3 library for interfacing with OAuth 2.0 services.
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Easily access the Shopify API with Elixir.
- shopify
- shopify-api
- elixir
- elixir-lang
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
Rule based authorization for Elixir
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Library for working with OpenID Connect and implementing clients.
Delphi basic library for validation and authentication of LDAP users in Active Directory.
- activedirectory
- delphi
- adsi
- ldap
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
:camera: Instagram API client for the Elixir language (elixir-lang)
- elixir
- instagram-client
- oauth
- instagram
A tool to Terraform and automate password cracking on AWS.
Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).
Dynamically generate self-signed certificates and certificate authorities for Go tests
- golang
- certificate-generation
- go
- testing
Middleware based authorization for Absinthe GraphQL powered by Bodyguard