Alternatives and similar repositories for POCs

Users that are interested in POCs are comparing it to the libraries listed below

• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆50Updated last year
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated last year
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆125Updated 2 years ago
• Hagrid29 / CVE-2024-2432-PaloAlto-GlobalProtect-EoP
  ☆63Updated last year
• ASP4RUX / bypassEDR-AV
  ☆59Updated last year
• seriotonctf / Red-Team-Notes
  ☆48Updated 3 months ago
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆51Updated 9 months ago
• w1th4d / JarPlant
  Java archive implant toolkit.
  ☆61Updated 9 months ago
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆61Updated last year
• watchtowrlabs / connectwise-screenconnect_auth-bypass-add-user-poc
  ☆73Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆56Updated 3 months ago
• ar0x4 / ysoserial.net-docker
  ysoserial.net docker image
  ☆28Updated last year
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 6 months ago
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆94Updated 5 months ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated last year
• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆86Updated 11 months ago
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆76Updated last year
• macrl2000 / reaper-wu
  vulnlab.com reaper writeup
  ☆27Updated 2 years ago
• 0xjessie21 / CVE-2025-24016
  CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
  ☆42Updated 11 months ago
• two06 / CerealKiller
  .NET deserialization hunter
  ☆81Updated last year
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated last year
• nopcorn / DuckDuckC2
  A proof-of-concept C2 channel through DuckDuckGo's image proxy service
  ☆77Updated 2 years ago
• jeanlucdupont / EXEfromCER
  PoC that downloads an executable from a public SSL certificate
  ☆136Updated 6 months ago
• deletehead / OctoC2t
  Simple C2 using GitHub repository as comms channel.
  ☆31Updated last year
• dmcxblue / Red-Team-Guide
  A small red team course
  ☆40Updated 2 years ago
• 0xBienCuit / InfraRed-AWS
  ☆63Updated last month
• kleiton0x00 / contexter
  Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
  ☆26Updated last year
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆38Updated last year
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆127Updated 7 months ago