Alternatives and similar repositories for POCs

Users that are interested in POCs are comparing it to the libraries listed below

• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆49Updated 11 months ago
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆103Updated 2 years ago
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated last year
• ASP4RUX / bypassEDR-AV
  ☆59Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆54Updated last month
• seriotonctf / Red-Team-Notes
  ☆46Updated 2 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆53Updated 7 months ago
• watchtowrlabs / connectwise-screenconnect_auth-bypass-add-user-poc
  ☆73Updated last year
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 11 months ago
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆115Updated last year
• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆86Updated 9 months ago
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆90Updated 4 months ago
• 0xjessie21 / CVE-2025-24016
  CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
  ☆42Updated 10 months ago
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆74Updated 11 months ago
• w1th4d / JarPlant
  Java archive implant toolkit.
  ☆61Updated 8 months ago
• ar0x4 / ysoserial.net-docker
  ysoserial.net docker image
  ☆28Updated last year
• Hagrid29 / CVE-2024-2432-PaloAlto-GlobalProtect-EoP
  ☆63Updated last year
• sinsinology / CVE-2024-6670
  ☆35Updated last year
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆64Updated last year
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated last year
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆93Updated last year
• dmcxblue / Red-Team-Guide
  A small red team course
  ☆40Updated 2 years ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 5 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆124Updated 6 months ago
• VirtualSamuraii / flyphish
  Deploy a phishing infrastructure on the fly.
  ☆78Updated last year
• jeanlucdupont / EXEfromCER
  PoC that downloads an executable from a public SSL certificate
  ☆135Updated 5 months ago
• 0xBienCuit / InfraRed-AWS
  ☆62Updated 2 weeks ago
• kn0x0x / CVE-2025-32756-POC
  Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.
  ☆102Updated 6 months ago
• two06 / CerealKiller
  .NET deserialization hunter
  ☆81Updated last year