Alternatives and similar repositories for POCs

Users that are interested in POCs are comparing it to the libraries listed below

• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆49Updated last year
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated last year
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆103Updated 2 years ago
• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆86Updated 10 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• ASP4RUX / bypassEDR-AV
  ☆59Updated last year
• dmcxblue / Red-Team-Guide
  A small red team course
  ☆40Updated 2 years ago
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated last year
• sinsinology / CVE-2024-6670
  ☆35Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆56Updated 2 months ago
• watchtowrlabs / connectwise-screenconnect_auth-bypass-add-user-poc
  ☆73Updated last year
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆94Updated 4 months ago
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆51Updated 8 months ago
• raskolnikov90 / LainAmsiOpenSession
  Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll
  ☆49Updated 7 months ago
• Hagrid29 / CVE-2024-2432-PaloAlto-GlobalProtect-EoP
  ☆63Updated last year
• ar0x4 / ysoserial.net-docker
  ysoserial.net docker image
  ☆28Updated last year
• seriotonctf / Red-Team-Notes
  ☆47Updated 3 months ago
• w1th4d / JarPlant
  Java archive implant toolkit.
  ☆61Updated 9 months ago
• kleiton0x00 / contexter
  Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
  ☆25Updated last year
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆54Updated 11 months ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆59Updated 10 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆124Updated 6 months ago
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆75Updated 11 months ago
• jeanlucdupont / EXEfromCER
  PoC that downloads an executable from a public SSL certificate
  ☆135Updated 5 months ago
• nopcorn / DuckDuckC2
  A proof-of-concept C2 channel through DuckDuckGo's image proxy service
  ☆77Updated 2 years ago
• VirtualSamuraii / flyphish
  Deploy a phishing infrastructure on the fly.
  ☆78Updated last year
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆64Updated last year
• CyberSecurityUP / AV-EDR-Evasion-Practical-Techniques-Course
  ☆58Updated 6 months ago
• 0xjessie21 / CVE-2025-24016
  CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
  ☆42Updated 11 months ago