GitHub stars · StarDay

1chaitin / xrayA comprehensive security assessment tool self-developed by Changting, which supports scanning of common web security issues and customized POC | Be sure to read the documentation before using itVueLicense not declared11,785

2frohoff / ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.JavaMIT · Permissive9,094

3trickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · Permissive8,190

4nomi-sec / PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.CC0-1.0 · Permissive8,181

5Mr-xn / Penetration_Testing_POCPOC, EXP, scripts, privilege escalation, gadgets, etc. related to penetration testing---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cmsHTMLApache-2.0 · Permissive7,563

6k8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · Permissive6,243

7ffffffff0x / 1earnThe security knowledge framework maintained by the ffffffff0x team includes content that is not limited to web security, industrial control security, forensics, emergency response, blue team facility deployment, post-infiltration, Linux security, and various target drone writeups.C++License not declared5,734

8drk1wi / ModlishkaModlishka. Reverse Proxy.GoGPL-3.0 · Share derivative source5,441

9k8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · Permissive5,342

10Threekiii / Awesome-POCA vulnerability PoC knowledge base. A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.JavaLicense not declared5,244

11gommzystudio / device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)TypeScriptLicense not declared5,211

12zan8in / afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.GoMIT · Permissive4,454

13zhzyker / exphubExphub [Exploit Script Library] Including vulnerability exploitation scripts for Webloigc, Struts2, Tomcat, Nexus, Solr, Jboss, and Drupal, with the latest additions of CVE-2020-14882, CVE-2020-11444, and CVE-2020-10 204. CVE-2020-10199, CVE-2020-1938, CVE-2020-2551, CVE-2020-2555, CVE-2020-2883, CVE-2019-17558, CVE-2019-6340PythonLicense not declared4,294

14qazbnm456 / awesome-cve-poc✍️ A curated list of CVE PoCs.License not declared3,546

15Ares-X / VulWikiThe Chinese vulnerability knowledge base organizes the principles and public recurrence data of Web, middleware, network equipment and system vulnerabilities, and supports retrieval by product, CVE, and fingerprint. Chinese vulnerability knowledge base.PythonLicense not declared233