Alternatives and similar repositories for POCs

Users that are interested in POCs are comparing it to the libraries listed below

• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆49Updated 10 months ago
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆101Updated 2 years ago
• w1th4d / JarPlant
  Java archive implant toolkit.
  ☆61Updated 7 months ago
• ASP4RUX / bypassEDR-AV
  ☆59Updated last year
• ar0x4 / ysoserial.net-docker
  ysoserial.net docker image
  ☆28Updated last year
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated last year
• Hagrid29 / CVE-2024-2432-PaloAlto-GlobalProtect-EoP
  ☆63Updated last year
• sinsinology / CVE-2024-6670
  ☆35Updated last year
• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆53Updated last month
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆90Updated 3 months ago
• seriotonctf / Red-Team-Notes
  ☆45Updated last month
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated 11 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 4 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆87Updated 9 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆125Updated 5 months ago
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆74Updated 10 months ago
• watchtowrlabs / connectwise-screenconnect_auth-bypass-add-user-poc
  ☆73Updated last year
• raskolnikov90 / LainAmsiOpenSession
  Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll
  ☆45Updated 5 months ago
• kleiton0x00 / contexter
  Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
  ☆24Updated last year
• nopcorn / DuckDuckC2
  A proof-of-concept C2 channel through DuckDuckGo's image proxy service
  ☆76Updated 2 years ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 10 months ago
• horizon3ai / CVE-2023-48788
  Fortinet FortiClient EMS SQL Injection
  ☆51Updated last year
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆116Updated last year
• 0xBienCuit / InfraRed-AWS
  ☆62Updated last year
• sinsinology / CVE-2024-5009
  Exploit for CVE-2024-5009
  ☆13Updated last year
• two06 / CerealKiller
  .NET deserialization hunter
  ☆81Updated last year
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆53Updated 7 months ago
• watchtowrlabs / CVE-2024-40711
  Pre-Auth Exploit for CVE-2024-40711
  ☆54Updated last year
• ihebski / CVE-2024-3400
  CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect
  ☆29Updated last year