All projects
Repositories in this selection 15 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Cchaitin / xrayA comprehensive security assessment tool self-developed by Changting, which supports scanning of common web security issues and customized POC | Be sure to read the documentation before using itVueNOASSERTION · Restricted / unknownInsufficient rank history11,7821,870——2024-10-29
2—Ffrohoff / ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.JavaMIT · PermissiveInsufficient rank history9,0961,852——2025-12-04
3—Ttrickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · PermissiveInsufficient rank history8,179983——2026-10-16
4—Nnomi-sec / PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.UnknownCC0-1.0 · PermissiveInsufficient rank history8,1751,369——2026-11-03
5—MMr-xn / Penetration_Testing_POCPOC, EXP, scripts, privilege escalation, gadgets, etc. related to penetration testing---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cmsHTMLApache-2.0 · PermissiveInsufficient rank history7,5572,039——2026-11-02
6—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
7—Fffffffff0x / 1earnThe security knowledge framework maintained by the ffffffff0x team includes content that is not limited to web security, industrial control security, forensics, emergency response, blue team facility deployment, post-infiltration, Linux security, and various target drone writeups.C++Unknown · Restricted / unknownInsufficient rank history5,7311,261——2024-06-06
8—Ddrk1wi / ModlishkaModlishka. Reverse Proxy.GoGPL-3.0 · Share derivative sourceInsufficient rank history5,437957——2026-08-14
9—Kk8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · PermissiveInsufficient rank history5,340882——2025-03-24
10—TThreekiii / Awesome-POCA vulnerability PoC knowledge base. A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.JavaUnknown · Restricted / unknownInsufficient rank history5,2401,055——2026-05-11
11—Ggommzystudio / device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history5,192705——2025-12-31
12—Zzan8in / afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.GoMIT · PermissiveInsufficient rank history4,453494——2026-11-03
13—Zzhzyker / exphubExphub [Exploit Script Library] Including vulnerability exploitation scripts for Webloigc, Struts2, Tomcat, Nexus, Solr, Jboss, and Drupal, with the latest additions of CVE-2020-14882, CVE-2020-11444, and CVE-2020-10 204. CVE-2020-10199, CVE-2020-1938, CVE-2020-2551, CVE-2020-2555, CVE-2020-2883, CVE-2019-17558, CVE-2019-6340PythonUnknown · Restricted / unknownInsufficient rank history4,2941,077——2021-04-04
14—Qqazbnm456 / awesome-cve-poc✍️ A curated list of CVE PoCs.UnknownUnknown · Restricted / unknownInsufficient rank history3,546715——2022-01-04
15—AAres-X / VulWikiThe Chinese vulnerability knowledge base organizes the principles and public recurrence data of Web, middleware, network equipment and system vulnerabilities, and supports retrieval by product, CVE, and fingerprint. Chinese vulnerability knowledge base.PythonUnknown · Restricted / unknownInsufficient rank history22875——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.