A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
☆1,570Nov 6, 2026Updated this week
Alternatives and similar repositories for php2shell-bypass-aslr-exp
Users that are interested in php2shell-bypass-aslr-exp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆296Oct 30, 2026Updated last week
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆1,080Oct 22, 2026Updated 3 weeks ago
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆144Oct 21, 2026Updated 3 weeks ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE☆198Oct 26, 2026Updated 2 weeks ago
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- ☆47Oct 14, 2026Updated 3 weeks ago
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 6 months ago
- ☆45Oct 21, 2026Updated 3 weeks ago
- ☆99Oct 22, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆130Aug 21, 2026Updated 2 months ago
- A public release of the Steal My Bitcoin challenge☆1,048Nov 3, 2026Updated last week
- Working RCE PoCs: php2shell-8512 on FULLY-PATCHED PHP 8.5.12 (session-gaps, one-shot+interactive, demo video) + session poisoning -> LFI …☆25Oct 23, 2026Updated 2 weeks ago
- ☆13Jun 30, 2026Updated 4 months ago
- poc it like it's hot☆1,157Oct 27, 2026Updated 2 weeks ago
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆294May 18, 2026Updated 5 months ago
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆70Aug 3, 2026Updated 3 months ago
- POC pre-auth RCE on Exchange☆194Aug 22, 2026Updated 2 months ago
- CVE-85884 POC☆39Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.☆564Oct 24, 2026Updated 2 weeks ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆815Aug 11, 2026Updated 3 months ago
- NGINX RCE exploits☆932Jul 25, 2026Updated 3 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,862Nov 1, 2026Updated last week
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆78Oct 30, 2026Updated 2 weeks ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆75Nov 4, 2026Updated last week
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆5,249May 10, 2026Updated 6 months ago
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆5,187Sep 16, 2026Updated last month
- Certighost POC☆342Jul 28, 2026Updated 3 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆110Oct 27, 2026Updated 2 weeks ago
- 🐘 php2shell（CVE-2026-109618 / CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC☆35Oct 21, 2026Updated 3 weeks ago
- Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin…☆5,052Sep 7, 2026Updated 2 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆37Oct 28, 2026Updated 2 weeks ago
Are these results useful?