Alternatives and similar repositories for Empire-C2-RCE-PoC

Users that are interested in Empire-C2-RCE-PoC are comparing it to the libraries listed below

• syncwithali / HavocExploit
  A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc.
  ☆35Updated last year
• horizon3ai / CVE-2024-9465
  Proof of Concept Exploit for CVE-2024-9465
  ☆29Updated 7 months ago
• ASP4RUX / bypassEDR-AV
  ☆56Updated 6 months ago
• snovvcrash / exfiltrate
  exfiltration/infiltration toolkit
  ☆23Updated last year
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated last year
• gemini-security / GithubC2
  ☆28Updated last year
• Leo4j / ShellGen
  PowerShell script to generate ShellCode in various formats
  ☆41Updated 7 months ago
• duy-31 / CVE-2023-35636
  Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
  ☆44Updated last year
• 0xEr3bus / ShadowForgeC2
  ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.
  ☆47Updated last year
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 7 months ago
• RomanRII / jenkins-strike
  Cobalt Strike profile generator using Jenkins to automate the heavy lifting
  ☆36Updated 2 years ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated 3 months ago
• HulkOperator / AuthStager
  ☆55Updated 6 months ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆40Updated 11 months ago
• Faran-17 / EarlyBird-APC-Injection
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆32Updated last year
• 0xjessie21 / CVE-2025-24016
  CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
  ☆37Updated 2 months ago
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆50Updated last week
• watchtowrlabs / CVE-2024-50623
  Cleo Unrestricted file upload and download PoC (CVE-2024-50623)
  ☆22Updated 5 months ago
• Workingdaturah / BOF-Learning
  Cobalt Strike BOFS
  ☆16Updated last year
• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆47Updated 4 months ago
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆38Updated 9 months ago
• smokeme / PDFator
  ☆27Updated last year
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆57Updated last week
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆56Updated last year
• d4rkiZ / ProcOpen-PHP-Webshell
  Experience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.
  ☆24Updated 10 months ago
• LuemmelSec / CVE-2023-29357
  ☆52Updated last year
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆56Updated 11 months ago
• S12cybersecurity / DumpLsass
  C++ Code to perform a MiniDump of lsass.exe
  ☆34Updated last year
• sinsinology / CVE-2024-6670
  ☆34Updated 8 months ago
• Cyxow / CVE-2024-3183-POC
  POC for CVE-2024-3183 (FreeIPA Rosting)
  ☆21Updated 8 months ago