High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
☆1,001Oct 24, 2026Updated 2 weeks ago
Alternatives and similar repositories for php2shell-scanner
Users that are interested in php2shell-scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- High fidelity detection mechanism for node2shell (CVE-2026-111497)☆86Oct 25, 2026Updated 2 weeks ago
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆1,080Oct 22, 2026Updated 3 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆82Oct 22, 2026Updated 3 weeks ago
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- Reproducible PHP request-state RCE labs and self-checking PoC☆58Oct 25, 2026Updated 2 weeks ago
- PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE☆198Oct 26, 2026Updated 2 weeks ago
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆296Oct 30, 2026Updated last week
- ☆144Oct 21, 2026Updated 3 weeks ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- A web-based CVE host lookup tool built for Tenable Security Center API. Query affected hosts by CVE ID with paginated results and CSV exp…☆14Sep 7, 2026Updated 2 months ago
- Operational information regarding the 2026 php2shell vulnerabilities☆367Updated this week
- Google Gemini API key discovery and security scanning tool.☆43Nov 2, 2026Updated last week
- ☆41Oct 21, 2026Updated 3 weeks ago
- php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discover…☆104Oct 23, 2026Updated 2 weeks ago
- ☆99Oct 22, 2026Updated 3 weeks ago
- A web security workbench built for AI agents.☆393Updated this week
- Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.☆102Oct 23, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-85884 POC☆39Updated this week
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆75Nov 4, 2026Updated last week
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆37May 28, 2026Updated 5 months ago
- ☆45Oct 21, 2026Updated 3 weeks ago
- Hides Android emulator artifacts from apps with SUSFS kernel rules, not hooks. KernelSU module for x86_64 AVDs.☆55Updated this week
- Claude Code skill + 18 AI agents for Android & iOS mobile app security audits. OWASP MASVS/MASTG-aligned, with adversarial exploitation c…☆21Oct 8, 2026Updated last month
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆815Aug 11, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆28Apr 30, 2026Updated 6 months ago
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- Helps defenders find their WSUS configurations in the wake of CVE-2025-59287☆46Oct 28, 2025Updated last year
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆932Oct 3, 2026Updated last month
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 6 months ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆45Sep 11, 2026Updated 2 months ago
- Automated Multi-Vector Cross-Site Scripting (XSS) Scanner☆65Updated this week
Are these results useful?