Alternatives and similar repositories for Havoc-C2-SSRF-poc

Users that are interested in Havoc-C2-SSRF-poc are comparing it to the libraries listed below

• testanull / MS-SharePoint-July-Patch-RCE-PoC
  ☆158Updated last year
• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆87Updated 10 months ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆258Updated last year
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 7 months ago
• seriotonctf / Red-Team-Notes
  ☆43Updated last month
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆87Updated last month
• Wh04m1001 / CVE-2024-20656
  ☆136Updated last year
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆143Updated 7 months ago
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆196Updated 9 months ago
• 0xbigshaq / CVE-2025-25257
  FortiWeb CVE-2025-25257 exploit
  ☆50Updated last month
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆106Updated 2 months ago
• Chocapikk / CVE-2023-29357
  Microsoft SharePoint Server Elevation of Privilege Vulnerability
  ☆233Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆47Updated 2 months ago
• elweth-sec / CVE-2023-2255
  CVE-2023-2255 Libre Office
  ☆60Updated 2 years ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆88Updated 9 months ago
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆17Updated 8 months ago
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆141Updated 2 years ago
• adityatelange / evil-winrm-py
  Execute commands interactively on remote Windows machines using the WinRM protocol
  ☆208Updated last week
• watchtowrlabs / watchTowr-vs-progress-moveit_CVE-2024-5806
  Exploit for the CVE-2024-5806
  ☆45Updated last year
• irsdl / ysonet
  Deserialization payload generator for a variety of .NET formatters
  ☆111Updated last week
• sqrtZeroKnowledge / CVE-2023-23397_EXPLOIT_0DAY
  Exploit for the CVE-2023-23397
  ☆161Updated 2 years ago
• Jnnshschl / CVE-2023-38146
  PoC for the ThemeBleed Windows 11 CVE-2023-38146 written in python using impacket. https://jnns.de/posts/cve-2023-38146-poc/
  ☆21Updated last year
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• h4x0r-dz / CVE-2024-3400
  CVE-2024-3400 Palo Alto OS Command Injection
  ☆160Updated last year
• bruno-1337 / SeDebugPrivilege-Exploit
  Simple C++ PoC of SeDebugPrivilege Privesc
  ☆24Updated last year
• N1k0la-T / CVE-2023-36745
  ☆166Updated last year
• ricardojoserf / WhoamiAlternatives
  Different methods to get current username without using whoami
  ☆178Updated last year
• soltanali0 / CVE-2025-53770-Exploit
  SharePoint WebPart Injection Exploit Tool
  ☆262Updated 3 weeks ago
• mertdas / RedPersist
  ☆220Updated last year