wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
☆808Aug 11, 2026Updated 2 months ago
Alternatives and similar repositories for wp2shell-poc
Users that are interested in wp2shell-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core☆121Jul 18, 2026Updated 3 months ago
- Stock vulnerable wordpress RCE poc for wp2shell.☆114Jul 18, 2026Updated 3 months ago
- Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) i…☆66Jul 22, 2026Updated 3 months ago
- ☆447Apr 29, 2026Updated 6 months ago
- poc it like it's hot☆1,143Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,898Updated this week
- nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.☆35Jul 27, 2026Updated 3 months ago
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆70Aug 3, 2026Updated 2 months ago
- ☆24Jul 7, 2026Updated 3 months ago
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆35Updated this week
- RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1☆522Jul 24, 2026Updated 3 months ago
- Certighost POC☆338Jul 28, 2026Updated 3 months ago
- ☆5,170May 10, 2026Updated 5 months ago
- Next.js RCE☆52Sep 29, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆5,175Sep 16, 2026Updated last month
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,647Updated this week
- CVE-2026-63030, CVE-2026-60137, wp2shell scanner☆68Jul 18, 2026Updated 3 months ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- RoguePlanet Windows Defender Vulnerability☆14Jun 9, 2026Updated 4 months ago
- NGINX RCE exploits☆931Jul 25, 2026Updated 3 months ago
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆264May 18, 2026Updated 5 months ago
- CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection☆509May 1, 2026Updated 5 months ago
- EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.☆70May 11, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆183May 12, 2026Updated 5 months ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆233Jun 2, 2026Updated 4 months ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆43Sep 22, 2026Updated last month
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆125Aug 21, 2026Updated 2 months ago
- Windows ProfSvc 0day☆11Jul 14, 2026Updated 3 months ago
- Multi-architecture Linux privilege escalation toolkit with 29 pre-built and runtime-compilable exploits. Auto-detects kernel version, fil…☆434Sep 23, 2026Updated last month
- PoC Exploit for the NTLM reflection SMB flaw.☆720Feb 18, 2026Updated 8 months ago
- ☆127Apr 23, 2026Updated 6 months ago
- PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare☆147Jun 17, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Deserialization payload generator for a variety of .NET formatters☆244Oct 21, 2026Updated last week
- ☆14Jul 18, 2026Updated 3 months ago
- ☆35Jun 12, 2026Updated 4 months ago
- Exploitation of CVE-2025-29969☆69Feb 20, 2026Updated 8 months ago
- Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Cryst…☆386Aug 31, 2026Updated last month
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,801Oct 18, 2026Updated last week