A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
☆1,143Oct 23, 2026Updated this week
Alternatives and similar repositories for php2shell-bypass-aslr-exp
Users that are interested in php2shell-bypass-aslr-exp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,653Updated this week
- ☆138Updated this week
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 5 months ago
- CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656☆97Updated this week
- PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). …☆133Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆901Updated this week
- Fastjson 1.2.68 ~ 1.2.83 RCE，jdk8、17、21和25全版本，支持批量urls进行poc验证。☆37Jul 21, 2026Updated 3 months ago
- ☆46Oct 14, 2026Updated last week
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆104Updated this week
- Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised securi…☆29Aug 20, 2026Updated 2 months ago
- PoC for CVE-2026-2005☆27May 13, 2026Updated 5 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆105Updated this week
- Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabil…☆91Updated this week
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆437Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 3 months ago
- CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC☆101Sep 6, 2026Updated last month
- Capability extraction from Time Travel Debugging Traces with C++ Implementation of CAPA that supports code scanning☆30Sep 24, 2026Updated 3 weeks ago
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆82Sep 10, 2026Updated last month
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- cve-2026-86060 PoC☆55Sep 23, 2026Updated last month
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploi…☆18May 8, 2026Updated 5 months ago
- ☆31Sep 1, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
- NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC☆18Sep 2, 2026Updated last month
- GhostWave aka "P7 DarkSword" RCE☆101Oct 16, 2026Updated last week
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆264May 18, 2026Updated 5 months ago
- Since Minesraft2 is gone I used the Wayback Machine so we can still use the cheats, https://github.com/VillainsRule/Blooket-Site or https…☆11Mar 28, 2023Updated 3 years ago
- OSCP material tools and helpful scripts.☆19Jul 14, 2026Updated 3 months ago
- The new generation of famous WSO web shell. With perks included☆49Jul 20, 2026Updated 3 months ago
- ARTEX 源码备份：基于 Autumn-27/ARTEX v0.3.15，保留原始提交历史与 AGPL-3.0 许可证。☆948Oct 8, 2026Updated 2 weeks ago
- 403 Access Bypass Tester☆125Oct 13, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NGINX RCE exploits☆932Jul 25, 2026Updated 2 months ago
- ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.☆2,528Updated this week
- A Ralph Wiggum-style Claude Code plugin for iterative vulnerability hunting...☆15Feb 20, 2026Updated 8 months ago
- Privacy focused NixOS pentesting environment with a customizable desktop and security tools.☆56Updated this week
- ☆24Sep 12, 2026Updated last month
- Malware as a Service Ludus Range☆136Sep 24, 2026Updated 3 weeks ago
- An intelligent code analysis system powered by AI large language models that automatically generates project summaries, tech stack analys…☆26Sep 20, 2026Updated last month