A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
☆861Feb 26, 2024Updated 2 years ago
Alternatives and similar repositories for php-exploit-scripts
Users that are interested in php-exploit-scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of PHP backdoors. For educational or testing purposes only.☆2,275Mar 9, 2024Updated 2 years ago
- Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!☆1,962Mar 3, 2021Updated 5 years ago
- Detect potentially malicious PHP files☆1,475Oct 20, 2023Updated 3 years ago
- WebShell Collect☆396Sep 14, 2016Updated 10 years ago
- Miscellaneous exploit code☆1,572Oct 6, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,043Nov 24, 2019Updated 6 years ago
- Automated Linux evil maid attack☆436Dec 22, 2015Updated 10 years ago
- A Python Framework For NoSQL Scanning and Exploitation☆604Dec 6, 2024Updated last year
- Script to steal passwords from ssh.☆488Dec 19, 2018Updated 7 years ago
- webshell sample for WebShell Log Analysis☆417Feb 24, 2022Updated 4 years ago
- Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor☆2,503May 6, 2024Updated 2 years ago
- Weaponized web shell☆3,545Oct 1, 2025Updated last year
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malic…☆512Jan 8, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool that can scan php vulnerabilities automatically using static analysis methods☆487Mar 20, 2018Updated 8 years ago
- Post Exploitation Collection☆1,586May 1, 2020Updated 6 years ago
- linux rootkit☆162Feb 12, 2018Updated 8 years ago
- Exploitation for XSS☆738Aug 5, 2021Updated 5 years ago
- This is a webshell open source project☆10,795Dec 24, 2024Updated last year
- Next Generation Firewall Audit and Bypass Tool☆267Apr 24, 2017Updated 9 years ago
- Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆726Nov 19, 2017Updated 8 years ago
- BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal compute…☆331Apr 19, 2017Updated 9 years ago
- a fast domain brute tool☆413Mar 2, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.☆167Jun 10, 2021Updated 5 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆833Aug 11, 2026Updated 2 months ago
- PHP Webshell with handy features☆2,683Jul 6, 2023Updated 3 years ago
- Ease-of-use extension for Web Application penetration testing☆18Jun 20, 2017Updated 9 years ago
- Malware exploits☆572Aug 22, 2025Updated last year
- A webshell framework for penetration testers.☆298Aug 10, 2025Updated last year
- Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.☆1,834Oct 26, 2026Updated last week
- Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆312Sep 10, 2018Updated 8 years ago
- MSDAT: Microsoft SQL Database Attacking Tool☆1,019Aug 1, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Vulnerability Labs for security analysis☆1,166Mar 10, 2021Updated 5 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- Stealing CSRF tokens with CSS injection (without iFrames)☆320Feb 7, 2018Updated 8 years ago
- Free web-application vulnerability and version scanner☆576Sep 26, 2026Updated last month
- SHELLING - a comprehensive OS command injection payload generator☆441Mar 16, 2020Updated 6 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆378Oct 12, 2020Updated 6 years ago
- A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.☆992Dec 13, 2017Updated 8 years ago