Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
☆111Oct 21, 2026Updated 3 weeks ago
Alternatives and similar repositories for php2shell-scanner
Users that are interested in php2shell-scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆45Oct 21, 2026Updated 3 weeks ago
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆82Oct 22, 2026Updated 3 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆1,080Oct 22, 2026Updated 3 weeks ago
- ☆11Oct 21, 2026Updated 3 weeks ago
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- ☆37Sep 6, 2026Updated 2 months ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 10 months ago
- A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically de…☆104Nov 2, 2026Updated last week
- PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE☆198Oct 26, 2026Updated 2 weeks ago
- An advanced data pipeline engine for the BloodHound OpenGraph framework☆19Apr 11, 2026Updated 7 months ago
- ☆99Oct 22, 2026Updated 3 weeks ago
- ☆89May 26, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Three LLMs review your design plan in parallel — paste 30 lines into your CLAUDE.md, no install needed.☆15May 2, 2026Updated 6 months ago
- Awesome BYOR (Bring Your Own Reputation)☆34Jul 8, 2026Updated 4 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆184May 12, 2026Updated 6 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆37May 28, 2026Updated 5 months ago
- A comprehensive reference repository of C++ code examples for Windows APIs, organized by function name, prefix, and execution context.☆33Feb 23, 2026Updated 8 months ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆26Apr 21, 2026Updated 6 months ago
- Full-stack LinkedIn OSINT toolkit. Four-phase funnel: discover companies by region, batch scrape employees, classify roles by hierarchy/d…☆57Feb 16, 2026Updated 8 months ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆36Jul 24, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 🀄️ WebShell Backdoor Framework☆16Jun 7, 2018Updated 8 years ago
- ASLR-bypassing RCE PoC for PHP's session.upload_progress chain (CVE-2026-109618 / CVE-2026-109619). Single file, no gdb, no /proc - addre…☆12Oct 21, 2026Updated 3 weeks ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 3 weeks ago
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆39Oct 7, 2026Updated last month
- ☆144Oct 21, 2026Updated 3 weeks ago
- Personal website built with Astro and Tailwind. Deployed on Vercel.☆13Updated this week
- CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core☆124Jul 18, 2026Updated 3 months ago
Are these results useful?