CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
☆1,962Oct 28, 2026Updated 2 weeks ago
Alternatives and similar repositories for php2shell-poc
Users that are interested in php2shell-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆1,080Oct 22, 2026Updated 3 weeks ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆296Oct 30, 2026Updated last week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆815Aug 11, 2026Updated 3 months ago
- ☆144Oct 21, 2026Updated 3 weeks ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE☆198Oct 26, 2026Updated 2 weeks ago
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 6 months ago
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- Operational information regarding the 2026 php2shell vulnerabilities☆367Updated this week
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2026-75604 Next.js Windows RCE poc☆109Aug 28, 2026Updated 2 months ago
- ☆45Oct 21, 2026Updated 3 weeks ago
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆66Oct 19, 2026Updated 3 weeks ago
- ☆5,249May 10, 2026Updated 6 months ago
- NGINX RCE exploits☆932Jul 25, 2026Updated 3 months ago
- Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness☆81Oct 25, 2026Updated 2 weeks ago
- Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; b…☆33Oct 21, 2026Updated 3 weeks ago
- A public release of the Steal My Bitcoin challenge☆1,048Nov 3, 2026Updated last week
- poc it like it's hot☆1,157Oct 27, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆82Oct 22, 2026Updated 3 weeks ago
- RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1☆522Jul 24, 2026Updated 3 months ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆45Sep 11, 2026Updated 2 months ago
- php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discover…☆104Oct 23, 2026Updated 2 weeks ago
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 3 weeks ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,862Nov 1, 2026Updated last week
- Remote HTTP-only RCE on PHP 8.4.26 + Apache prefork/mod_php (ASLR bypass via session.upload_progress UAF) — self-contained Docker lab, on…☆42Oct 22, 2026Updated 3 weeks ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code☆4,087Apr 29, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- High fidelity detection mechanism for node2shell (CVE-2026-111497)☆86Oct 25, 2026Updated 2 weeks ago
- ☆99Oct 22, 2026Updated 3 weeks ago
- POC pre-auth RCE on Exchange☆194Aug 22, 2026Updated 2 months ago
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆5,187Sep 16, 2026Updated last month
- RoguePlanet Windows Defender Vulnerability☆23Jun 9, 2026Updated 5 months ago
- CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.☆52Oct 26, 2026Updated 2 weeks ago
- HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity to…☆13,523Aug 3, 2026Updated 3 months ago
Are these results useful?