Alternatives and similar repositories for Empire-C2-RCE-PoC

Users that are interested in Empire-C2-RCE-PoC are comparing it to the libraries listed below

• syncwithali / HavocExploit
  A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc.
  ☆38Updated last year
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆42Updated last year
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated last year
• Faran-17 / EarlyBird-APC-Injection
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆32Updated last year
• gemini-security / GithubC2
  ☆28Updated last year
• duy-31 / CVE-2023-35636
  Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
  ☆44Updated last year
• Leo4j / ShellGen
  PowerShell script to generate ShellCode in various formats
  ☆42Updated 9 months ago
• 0xEr3bus / ShadowForgeC2
  ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.
  ☆47Updated last year
• horizon3ai / CVE-2024-9465
  Proof of Concept Exploit for CVE-2024-9465
  ☆29Updated 8 months ago
• snovvcrash / exfiltrate
  exfiltration/infiltration toolkit
  ☆23Updated last year
• 0xjessie21 / CVE-2025-24016
  CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
  ☆37Updated 4 months ago
• ASP4RUX / bypassEDR-AV
  ☆57Updated 7 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated 5 months ago
• sinsinology / CVE-2024-5009
  Exploit for CVE-2024-5009
  ☆13Updated 11 months ago
• LuemmelSec / CVE-2023-29357
  ☆52Updated last year
• tiepologian / CVE-2023-23397
  Proof of Concept for CVE-2023-23397 in Python
  ☆25Updated 2 years ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆40Updated last year
• hyp3rlinx / PSTrojanFile
  Unfixed Windows PowerShell Filename Code Execution POC
  ☆41Updated last year
• S12cybersecurity / DumpLsass
  C++ Code to perform a MiniDump of lsass.exe
  ☆34Updated last year
• kn0x0x / CVE-2025-32756-POC
  Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.
  ☆76Updated last week
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 9 months ago
• Patrick0x41 / BOF_All_Things
  Beacon Object Files (BOF) for Cobalt Strike.
  ☆31Updated 10 months ago
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆38Updated 5 months ago
• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆47Updated 5 months ago
• kargisimos / detenv
  A small and portable Windows C library for sandbox detection
  ☆35Updated last year
• magnusstubman / tokenduplicator
  Tool to start processes as SYSTEM using token duplication
  ☆38Updated 4 years ago
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆51Updated last month
• watchtowrlabs / CVE-2024-50623
  Cleo Unrestricted file upload and download PoC (CVE-2024-50623)
  ☆23Updated 6 months ago
• duck-sec / CVE-2023-28252-Compiled-exe
  A modification to fortra's CVE-2023-28252 exploit, compiled to exe
  ☆54Updated last year
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year