☆25Oct 25, 2026Updated this week
Alternatives and similar repositories for php2shell-research
Users that are interested in php2shell-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated last month
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆34Oct 20, 2026Updated last week
- ☆86Oct 22, 2026Updated last week
- ☆24Jul 7, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆23Jun 5, 2026Updated 4 months ago
- ☆12Dec 8, 2025Updated 10 months ago
- CVE-2026-8452 PreAuth RCE☆65Aug 14, 2026Updated 2 months ago
- ☆20Oct 10, 2025Updated last year
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆92Oct 22, 2026Updated last week
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- Telegram CVE-2026-107181☆21Oct 10, 2026Updated 2 weeks ago
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 5 months ago
- ☆22Dec 13, 2025Updated 10 months ago
- ☆22Sep 28, 2026Updated last month
- PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows☆16Jul 16, 2025Updated last year
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- iOS Syscall Explorer for IDA 9.X☆15May 26, 2026Updated 5 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Chrome extension to track upcoming coding contests☆22Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Exploit for CVE-2024-5009☆13Jul 8, 2024Updated 2 years ago
- Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.☆32Sep 9, 2026Updated last month
- Proof of conept to exploit vulnerable proxycommand configurations on ssh clients☆19Dec 21, 2023Updated 2 years ago
- ☆37Sep 6, 2026Updated last month
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discover…☆93Updated this week
- Execute shellcode via ASPNET compiler☆61Oct 2, 2025Updated last year
- Next.js RCE☆52Sep 29, 2026Updated last month
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆46Oct 18, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆21Oct 15, 2026Updated 2 weeks ago
- An example of an external LLVM plugin module transform pass for the latest versions.☆14Oct 21, 2025Updated last year
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Oct 16, 2026Updated last week
- A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an a…☆58Jan 8, 2026Updated 9 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 2 months ago
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year