CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
☆1,108Oct 22, 2026Updated this week
Alternatives and similar repositories for php2shell-poc
Users that are interested in php2shell-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆619Updated this week
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆661Updated this week
- ☆94Updated this week
- ☆23Sep 28, 2026Updated 3 weeks ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆65Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656☆93Updated this week
- Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for developmen…☆28Jul 23, 2026Updated 3 months ago
- NGINX RCE exploits☆931Jul 25, 2026Updated 2 months ago
- A GUI for Sliver☆173Updated this week
- FortiSandbox RCE Scanner — CVE-2026-39808☆27Apr 21, 2026Updated 6 months ago
- Cross-platform situational-awareness BOFs for Windows, Linux, and macOS☆16Oct 15, 2026Updated last week
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆14Aug 21, 2026Updated 2 months ago
- POC☆43Jul 21, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Find and fix OPSEC leaks in your PE files before defenders do☆46Jul 22, 2026Updated 3 months ago
- ☆22May 7, 2026Updated 5 months ago
- Certighost POC☆336Jul 28, 2026Updated 2 months ago
- Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.☆131Jul 22, 2026Updated 3 months ago
- pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig☆18Oct 13, 2026Updated last week
- A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploi…☆18May 8, 2026Updated 5 months ago
- ☆16Aug 6, 2025Updated last year
- Next.js RCE☆53Sep 29, 2026Updated 3 weeks ago
- ☆30Mar 4, 2026Updated 7 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Since Minesraft2 is gone I used the Wayback Machine so we can still use the cheats, https://github.com/VillainsRule/Blooket-Site or https…☆11Mar 28, 2023Updated 3 years ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆233Jun 2, 2026Updated 4 months ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆803Aug 11, 2026Updated 2 months ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆44Sep 11, 2026Updated last month
- CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorize…☆118Updated this week
- USB software that takes selected files off of a PC that you plug it into☆13Jul 31, 2023Updated 3 years ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆57Aug 21, 2026Updated 2 months ago
- CVE-2026-75604 Next.js Windows RCE poc☆105Aug 28, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆147Jan 13, 2025Updated last year
- Leveraging arbitrary file read to RCE on Oracle PeopleSoft☆12Apr 2, 2025Updated last year
- ☆18Jan 1, 2026Updated 9 months ago
- Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.☆61Aug 17, 2026Updated 2 months ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- ☆5,117May 10, 2026Updated 5 months ago
- Repository for tools used for the OSCP☆29Sep 18, 2025Updated last year