Alternatives and similar repositories for Havoc-C2-SSRF-poc

Users that are interested in Havoc-C2-SSRF-poc are comparing it to the libraries listed below

• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆258Updated last year
• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆87Updated 11 months ago
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆142Updated 8 months ago
• testanull / MS-SharePoint-July-Patch-RCE-PoC
  ☆157Updated last year
• 0xbigshaq / CVE-2025-25257
  FortiWeb CVE-2025-25257 exploit
  ☆59Updated 2 months ago
• elweth-sec / CVE-2023-2255
  CVE-2023-2255 Libre Office
  ☆60Updated 2 years ago
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆88Updated 2 months ago
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆107Updated 2 months ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 7 months ago
• Wh04m1001 / CVE-2024-20656
  ☆136Updated last year
• Chocapikk / CVE-2023-29357
  Microsoft SharePoint Server Elevation of Privilege Vulnerability
  ☆234Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆48Updated 3 months ago
• Jnnshschl / CVE-2023-38146
  PoC for the ThemeBleed Windows 11 CVE-2023-38146 written in python using impacket. https://jnns.de/posts/cve-2023-38146-poc/
  ☆21Updated last year
• seriotonctf / Red-Team-Notes
  ☆44Updated last month
• N1k0la-T / CVE-2023-36745
  ☆166Updated last year
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆195Updated 10 months ago
• bruno-1337 / SeDebugPrivilege-Exploit
  Simple C++ PoC of SeDebugPrivilege Privesc
  ☆25Updated last year
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆153Updated last year
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆80Updated 3 weeks ago
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆89Updated 9 months ago
• sqrtZeroKnowledge / CVE-2023-23397_EXPLOIT_0DAY
  Exploit for the CVE-2023-23397
  ☆161Updated 2 years ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• h4x0r-dz / CVE-2024-3400
  CVE-2024-3400 Palo Alto OS Command Injection
  ☆160Updated last year
• nuts7 / CVE-2023-27372
  SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions…
  ☆65Updated 11 months ago
• wtechsec / LSASS-Forked-Dump---Bypass-EDR-CrowdStrike
  ☆56Updated 4 months ago
• adityatelange / evil-winrm-py
  Execute commands interactively on remote Windows machines using the WinRM protocol
  ☆220Updated this week
• watchtowrlabs / watchTowr-vs-progress-moveit_CVE-2024-5806
  Exploit for the CVE-2024-5806
  ☆45Updated last year
• iSee857 / CVE-2025-24813-PoC
  Apache Tomcat 远程代码执行漏洞批量检测脚本(CVE-2025-24813)
  ☆88Updated 5 months ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆134Updated last year