ASLR-bypassing RCE PoC for PHP's session.upload_progress chain (CVE-2026-109618 / CVE-2026-109619). Single file, no gdb, no /proc - addresses leaked in-band via Set-Cookie. PHP 8.4.26 & 8.5.11.
☆12Oct 21, 2026Updated 3 weeks ago
Alternatives and similar repositories for php2shell
Users that are interested in php2shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- CVE-2026-34486 Apache Tomcat EncryptInterceptor 绕过漏洞复现（使用GLM5.1复现完成）☆12Apr 15, 2026Updated 6 months ago
- ☆13Jun 30, 2026Updated 4 months ago
- Fuzzers implemented with libafl to evaluate several techniques on fuzzbench☆12Oct 10, 2024Updated 2 years ago
- XSS Worm which steals victim's cookies and some information also spread others. Written in js, php and java.☆10Dec 12, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AppleSilicon MacOS Live Kernel Debugger☆13Oct 15, 2025Updated last year
- MIPS32 emulation fuzzing☆13Nov 17, 2020Updated 5 years ago
- Windbg extension port for rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.☆13Sep 20, 2026Updated last month
- A command line program to download manga from multiple websites☆11Oct 13, 2026Updated 3 weeks ago
- Project created in the post about Sequelize in NodeJS with ExpressJS☆22Jun 14, 2018Updated 8 years ago
- Multi-agent Claude Code skills that turn a topic into a DaVinci/CapCut-ready video timeline — research to publish.☆16Jun 8, 2026Updated 5 months ago
- ☆11Jul 4, 2023Updated 3 years ago
- EASYAI 浏览器扩展程序，适用于 Arena.ai — 提供抽模型工具、使用Outlook邮箱 注册以及可选的 2Captcha 集成。☆15Oct 12, 2026Updated 3 weeks ago
- Collections of code obfuscation libaries for different languages ( in progress )☆15Mar 18, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 用Cloudflare worker反代blogspot实现免翻墙域名镜像站☆13Nov 25, 2025Updated 11 months ago
- ☆16Apr 6, 2023Updated 3 years ago
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE☆14Jun 14, 2022Updated 4 years ago
- A single-file Python tool that fingerprints a target, verifies the confirmed session.upload_progress session-file poisoning primitive, an…☆15Oct 22, 2026Updated 2 weeks ago
- technical analysis of a steganographic loader (Crypters and Tools) used by likely-TA558 to deliver various malware in Italy and Colombia☆14Aug 18, 2025Updated last year
- Find world writable directories that contain a .exe or .dll file☆13Aug 31, 2021Updated 5 years ago
- GoRAT is a (WiP/PoC) RAT in go that uses Google Drive/Sheet APIs☆14Sep 17, 2018Updated 8 years ago
- Stealthy Windows backdoor☆13Dec 2, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Python script to extract embedded data from binaries generated by SAPIEN Script Packager☆13Mar 20, 2024Updated 2 years ago
- ☆15Aug 11, 2025Updated last year
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- an experimental tool for forensic analysis of ExFAT filesystem☆21Oct 15, 2015Updated 11 years ago
- 三星放出的exFAT开源驱动☆16Aug 21, 2013Updated 13 years ago
- ☆22Jun 25, 2025Updated last year
- open-source mail forwarding stack☆16Jun 19, 2026Updated 4 months ago
- 无论到哪个Provider，都能让 Codex 历史会话重新荣光☆15Jul 20, 2026Updated 3 months ago
- Pentester's toolbox☆12Oct 28, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Conti V3 source code updated☆11Jun 30, 2022Updated 4 years ago
- Proof of concept (PoC) for CVE-2024-27316 (tested), CVE-2024-30255 (untested), CVE-2024-31309 (untested), CVE-2024-28182 (untested), CVE-…☆18Apr 13, 2024Updated 2 years ago
- My dotfiles☆12Aug 7, 2025Updated last year
- Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency☆16Aug 6, 2025Updated last year
- Capturing audio (.wav) from target using a link☆13Feb 21, 2020Updated 6 years ago
- Accelerated execution for fast Windows fuzzing☆26Jan 9, 2025Updated last year
- PowerShell port of GreenPlasma Admin -> System escalation☆12May 14, 2026Updated 5 months ago
Are these results useful?