Alternatives and similar repositories for PoCs:

Users that are interested in PoCs are comparing it to the libraries listed below

• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆123Updated 4 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆122Updated 4 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆70Updated 4 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆121Updated 4 years ago
• decoder-it / juicy-potato
  A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts t…
  ☆61Updated 6 years ago
• darkr4y / SharpOffensiveShell
  A sort of simple shell which support multiple protocols.
  ☆99Updated 5 years ago
• blackorbird / PrintNightmare
  ☆52Updated 3 years ago
• mdsecactivebreach / firewalker
  ☆147Updated 4 years ago
• RedCursorSecurityConsulting / CVE-2020-0668
  Use CVE-2020-0668 to perform an arbitrary privileged file move operation.
  ☆217Updated 4 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• goichot / CVE-2020-3153
  Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
  ☆105Updated 4 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆133Updated 3 years ago
• bytecod3r / Cobaltstrike-Aggressor-Scripts-Collection
  Collection of tested Cobaltstrike aggressor scripts.
  ☆110Updated 4 years ago
• uf0o / CVE-2020-17382
  PoC exploits for CVE-2020-17382
  ☆114Updated 4 years ago
• sailay1996 / cve-2020-1337-poc
  poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)
  ☆174Updated 4 years ago
• Cerbersec / DomainBorrowingC2
  ☆166Updated 3 years ago
• m57 / cobaltstrike_bofs
  My CobaltStrike BOFS
  ☆161Updated 2 years ago
• fox-it / LDAPFragger
  ☆189Updated 4 years ago
• rsmudge / ZeroLogon-BOF
  ☆160Updated 2 years ago
• rxwx / spoolsystem
  Print Spooler Named Pipe Impersonation for Cobalt Strike
  ☆262Updated 4 years ago
• offsecginger / AggressorScripts
  Various Aggressor Scripts I've Created.
  ☆148Updated 3 years ago
• decoder-it / juicy_2
  juicypotato for win10 > 1803 & win server 2019
  ☆96Updated 3 years ago
• rvrsh3ll / Rubeus-Rundll32
  Run Rubeus via Rundll32
  ☆198Updated 4 years ago
• cube0x0 / CVE-2020-1472
  ☆37Updated 4 years ago
• newsoft / adduser
  Programmatically create an administrative user under Windows
  ☆179Updated 7 years ago
• lexfo / rpc2socks
  Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.
  ☆182Updated 3 years ago
• 0neb1n / CVE-2020-16947
  PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)
  ☆125Updated 4 years ago
• decoder-it / powershellveryless
  Constrained Language Mode + AMSI bypass all in one
  ☆156Updated 5 years ago
• FSecureLABS / incognito
  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  ☆148Updated 4 years ago
• sailay1996 / RpcSsImpersonator
  Privilege Escalation Via RpcSs svc
  ☆176Updated 3 years ago