some fun php exploits
☆82Nov 12, 2024Updated last year
Alternatives and similar repositories for php-exploit
Users that are interested in php-exploit are comparing it to the libraries listed below
Sorting:
- ☆16Aug 19, 2024Updated last year
- PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"☆210Jul 6, 2025Updated 8 months ago
- My security presentations☆29Aug 21, 2023Updated 2 years ago
- Pickle decompiler plugin for Radare2☆18Aug 6, 2023Updated 2 years ago
- 构造字节在ASCII范围内的jar☆139Feb 14, 2022Updated 4 years ago
- ☆64Aug 15, 2023Updated 2 years ago
- Attachment and official writeup for D^3CTF 2025's Pwn challenge - d3kheap2☆16Jul 2, 2025Updated 8 months ago
- Reverse-engineer a Dockerfile from a Docker image.☆15Nov 7, 2023Updated 2 years ago
- Challenge attachments for RWCTF 3rd.☆91Jul 1, 2021Updated 4 years ago
- Those are my challenges for multiple CTF!☆10Mar 17, 2024Updated 2 years ago
- CVE-2024-43044的利用方式☆20Aug 13, 2024Updated last year
- A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.☆325Jun 2, 2024Updated last year
- Java Js Engine Payloads All in one☆291Aug 21, 2023Updated 2 years ago
- Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()☆504Sep 30, 2024Updated last year
- Flask 内存马☆314Mar 26, 2021Updated 4 years ago
- dotnet 反序列化学习笔记☆513Oct 19, 2023Updated 2 years ago
- WeChat in a Docker container☆11Mar 29, 2024Updated last year
- PHP binary bugs advisory☆178Jul 30, 2022Updated 3 years ago
- HITCON 2023 x DEVCORE Wargame☆22Aug 24, 2023Updated 2 years ago
- A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.☆39Jan 25, 2022Updated 4 years ago
- Script to setup pwn environment with Docker☆48Jan 10, 2026Updated 2 months ago
- 最强大的密码爆破/喷洒工具 | The most powerful bruteforcer / sprayer Artifact☆351Apr 10, 2025Updated 11 months ago
- Archive of AAA CTF 2023 (XCTF competition)☆37Nov 27, 2023Updated 2 years ago
- ☆206Oct 27, 2025Updated 4 months ago
- A POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension.☆97Oct 17, 2024Updated last year
- PolicyKit CVE-2021-3560 Exploitation (Authentication Agent)☆24Mar 6, 2023Updated 3 years ago
- ☆349Jan 24, 2023Updated 3 years ago
- attachments and (some) writeups/source code for RWCTF 6th☆126Feb 2, 2024Updated 2 years ago
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆68May 31, 2024Updated last year
- My Real World CTF challenges☆115Sep 19, 2019Updated 6 years ago
- A (small) web exploit framework☆97Dec 26, 2025Updated 2 months ago
- ☆20Sep 15, 2023Updated 2 years ago
- ☆34Jun 11, 2024Updated last year
- 总结了20+.Net反序列化文章,持续更新☆749Apr 3, 2024Updated last year
- Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.☆237Oct 8, 2024Updated last year
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆107Nov 7, 2024Updated last year
- ☆32Aug 21, 2023Updated 2 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆649Feb 15, 2025Updated last year
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具,可根据不同的Jdk生成出其所对应的xslt文件☆93Jan 17, 2023Updated 3 years ago