A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.
☆39Oct 31, 2026Updated last week
Alternatives and similar repositories for poc-archive
Users that are interested in poc-archive are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OSINT and infrastructure analysis tool leveraging AI GPT and multiple APIs to gather intelligence about domains, certificates, and web as…☆19Jun 8, 2026Updated 4 months ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 6 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- Win64 API monitor using EAT/IAT hooking - no API body patching or debugger attachment☆15Sep 5, 2026Updated 2 months ago
- ☆14Jun 9, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabil…☆103Updated this week
- Shellph is a portable command-line utility designed to automate encryption and obfuscation of arbitrary shellcode. Named after my cat (Be…☆37Jul 20, 2026Updated 3 months ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Velum-VMM: a Windows x64 research hypervisor with Intel VT-x, per-CPU EPT, syscall and kernel-entry hooks, live telemetry, scoped request…☆27Oct 25, 2026Updated last week
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆66Oct 16, 2026Updated 3 weeks ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆48Aug 1, 2026Updated 3 months ago
- Automated proxy DLL generator for DLL hijacking☆26Jun 4, 2026Updated 5 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Updated this week
- Debugger utilizing stealth hooks to hide from debugger detection☆28Aug 22, 2026Updated 2 months ago
- CVE-2026-75604 Next.js Windows RCE poc☆109Aug 28, 2026Updated 2 months ago
- ☆98Mar 28, 2026Updated 7 months ago
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- The only non-vegan C2 Framework☆11Jan 30, 2022Updated 4 years ago
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 3 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.☆31Sep 23, 2026Updated last month
- NVD semiupdated database to be used with CVEScannerV2☆19Oct 15, 2026Updated 3 weeks ago
- Detection for CVE-2025-10035☆18Oct 14, 2025Updated last year
- Toolkit for AirStrike 3D game analysis and apk asset extraction/package + save file view. For educational research and game preservation.☆26Oct 17, 2026Updated 3 weeks ago
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆89Updated this week
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆63Jul 22, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆69Aug 3, 2026Updated 3 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and res…☆35Apr 28, 2025Updated last year
- ACE Analyzer for identifying ESC1-8 vulnerabilities (Written by AI)☆42Jul 4, 2026Updated 4 months ago
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆149Jul 7, 2026Updated 4 months ago
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year