PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
☆198Oct 26, 2026Updated 2 weeks ago
Alternatives and similar repositories for php2shell-exploit
Users that are interested in php2shell-exploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Sep 11, 2026Updated 2 months ago
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆130Aug 21, 2026Updated 2 months ago
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆36Oct 28, 2026Updated 2 weeks ago
- Remote HTTP-only RCE on PHP 8.4.26 + Apache prefork/mod_php (ASLR bypass via session.upload_progress UAF) — self-contained Docker lab, on…☆42Oct 22, 2026Updated 3 weeks ago
- ☆13Mar 6, 2025Updated last year
- Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness☆81Oct 25, 2026Updated 2 weeks ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- ☆99Oct 22, 2026Updated 3 weeks ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- Red Team Operations Framework☆34Jul 14, 2024Updated 2 years ago
- CVE lookup + Wappalyzer☆39Oct 24, 2026Updated 2 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- Structured practice: Mainly PortSwigger lab writeups☆23Nov 3, 2026Updated last week
- wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with bat…☆10Jul 18, 2026Updated 3 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- KeySec Hunter is a **Chrome extension** that scans webpages and linked JavaScript files for **user-defined keywords** and **potential sec…☆59Dec 21, 2025Updated 10 months ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆46Sep 22, 2026Updated last month
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆296Oct 30, 2026Updated last week
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- Fortinet FortiClientEMS improper access control☆45Oct 14, 2026Updated 3 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Google Gemini API key discovery and security scanning tool.☆43Nov 2, 2026Updated last week
- Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.☆32May 11, 2026Updated 6 months ago
- Build reproducible vulnerable (and patched) target containers from templates, in a verified state, so you can validate any scanner, explo…☆11Updated this week
- RaveX - DLC for 1.21.11 :3☆21Updated this week
- Arsenal Kit like toolkit for Mythic's Starburst Agent☆15Sep 29, 2026Updated last month
- David Lin's Windows 10 Cheatsheet☆10Mar 5, 2024Updated 2 years ago
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆184May 12, 2026Updated 6 months ago
- Wazuh rules and integration script for querying file hashes against a MISP instance, generating alerts on matches, and optionally pushing…☆21Oct 6, 2025Updated last year
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- POC pre-auth RCE on Exchange☆194Aug 22, 2026Updated 2 months ago
- ☆24Jul 7, 2026Updated 4 months ago
- php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discover…☆104Oct 23, 2026Updated 2 weeks ago
- ☆26Jun 4, 2026Updated 5 months ago
- A simple browser extension to quickly find interesting security-related information on a webpage.☆191Nov 3, 2026Updated last week
Are these results useful?