Alternatives and similar repositories for pker

Users that are interested in pker are comparing it to the libraries listed below

• wupco / PHP_INCLUDE_TO_SHELL_CHAR_DICT

  View on GitHub
  ☆349Jan 24, 2023Updated 3 years ago
• ZeddYu / TLS-poison

  View on GitHub
  ☆17May 10, 2021Updated 4 years ago
• noraj / flask-session-cookie-manager

  View on GitHub
  Flask Session Cookie Decoder/Encoder
  ☆761Feb 8, 2025Updated last year
• DasSecurity-HatLab / AoiAWD

  View on GitHub
  AoiAWD-专为比赛设计，便携性好，低权限运行的EDR系统。
  ☆1,076Aug 5, 2024Updated last year
• wupco / weblogger

  View on GitHub
  针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
  ☆741Jun 2, 2023Updated 2 years ago
• frankli0324 / libphpserialize

  View on GitHub
  implements php-style serialize/unserialize for python 3.7+
  ☆38Sep 19, 2022Updated 3 years ago
• LFYSec / XCTF2021Final-Dubbo

  View on GitHub
  Writeup and environment for XCTF2021Final-Dubbo
  ☆44May 31, 2021Updated 4 years ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,634Jan 17, 2026Updated 3 weeks ago
• Marven11 / Fenjing

  View on GitHub
  专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
  ☆1,222Updated this week
• gousaiyang / pickleassem

  View on GitHub
  A simple pickle assembler to make handcrafting pickle bytecode easier.
  ☆15Apr 16, 2021Updated 4 years ago
• rmb122 / rogue_mysql_server

  View on GitHub
  A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.
  ☆754Dec 2, 2022Updated 3 years ago
• fnmsd / MySQL_Fake_Server

  View on GitHub
  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
  ☆1,359Nov 18, 2021Updated 4 years ago
• synacktiv / php_filter_chains_oracle_exploit

  View on GitHub
  A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.
  ☆327Jun 2, 2024Updated last year
• leohearts / awd-watchbird

  View on GitHub
  A powerful PHP WAF for AWD
  ☆764Jul 7, 2024Updated last year
• phith0n / PaddingZip

  View on GitHub
  PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.
  ☆81Aug 14, 2022Updated 3 years ago
• n0b0dyCN / redis-rogue-server

  View on GitHub
  Redis(<=5.0.5) RCE
  ☆1,135Sep 24, 2023Updated 2 years ago
• mm0r1 / exploits

  View on GitHub
  Pwn stuff.
  ☆1,805May 31, 2022Updated 3 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• Nambers / python-audit_hook_head_finder

  View on GitHub
  PWNable pyjail
  ☆14Jan 13, 2025Updated last year
• Esonhugh / My-Cloud-Security

  View on GitHub
  [ALL IN ONE] Everything that I shared to public about Cloud Security is here.
  ☆61Apr 19, 2025Updated 9 months ago
• opensec-cn / chip

  View on GitHub
  a simple tool to detect potential security threat in php code
  ☆317Sep 9, 2024Updated last year
• beched / php_disable_functions_bypass

  View on GitHub
  procfs-based PHP sandbox bypass
  ☆133Sep 19, 2018Updated 7 years ago
• phith0n / code-breaking

  View on GitHub
  Code-Breaking Puzzles
  ☆292Apr 6, 2025Updated 10 months ago
• ev0A / ArbitraryFileReadList

  View on GitHub
  CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)
  ☆276Mar 13, 2022Updated 3 years ago
• waderwu / javaDeserializeLabs

  View on GitHub
  javaDeserializeLabs
  ☆70Apr 18, 2023Updated 2 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated 11 months ago
• LoRexxar / Kunlun-M

  View on GitHub
  KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
  ☆2,379Jan 16, 2026Updated 3 weeks ago
• ambionics / cnext-exploits

  View on GitHub
  Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()
  ☆502Sep 30, 2024Updated last year
• NeSE-Team / OurChallenges

  View on GitHub
  writeups for our challenges
  ☆147Dec 11, 2022Updated 3 years ago
• m4p1e / php-exploit

  View on GitHub
  some fun php exploits
  ☆81Nov 12, 2024Updated last year
• phith0n / zkar

  View on GitHub
  ZKar is a Java serialization protocol analysis tool implement in Go.
  ☆643Feb 15, 2025Updated 11 months ago
• Macr0phag3 / xsleaks-wiki-zh_CN

  View on GitHub
  xsleaks-wiki 中文版
  ☆15May 31, 2022Updated 3 years ago
• splitline / Pickora

  View on GitHub
  A toy compiler that can convert Python scripts 🐍 to pickle bytecode 🥒
  ☆140Feb 20, 2023Updated 2 years ago
• 1nhann / java_ser_format

  View on GitHub
  Just mindmapping according to official document ( useful for further study )
  ☆28May 20, 2022Updated 3 years ago
• pen4uin / java-memshell-generator

  View on GitHub
  一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.
  ☆2,150Aug 21, 2025Updated 5 months ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• wonderkun / CTFENV

  View on GitHub
  为应对CTF比赛而搭建的各种环境
  ☆156May 9, 2020Updated 5 years ago
• yangyangwithgnu / bypass_disablefunc_via_LD_PRELOAD

  View on GitHub
  bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
  ☆1,170Aug 7, 2021Updated 4 years ago
• datouo / CTF-Java-Gadget

  View on GitHub
  CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段
  ☆276Dec 13, 2024Updated last year