Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.
☆16Jul 22, 2026Updated 3 months ago
Alternatives and similar repositories for wp2shell
Users that are interested in wp2shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Leveraging arbitrary file read to RCE on Oracle PeopleSoft☆12Apr 2, 2025Updated last year
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated 3 weeks ago
- Windows tool for identifying and analyzing potential DLL sideloading opportunities☆14Aug 23, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- High fidelity detection mechanism for node2shell (CVE-2026-111497)☆85Updated this week
- Write-ups for the Buckeye Bureau of BOF☆27May 23, 2022Updated 4 years ago
- Longue vue is an exploit chain that can compromise over the internet NETGEAR DGND3700v2 devices.☆26Mar 15, 2022Updated 4 years ago
- A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure☆20Oct 11, 2026Updated 2 weeks ago
- Static, read-only macOS attack-surface mapper: ranks every launchd service by privilege, XPC exposure and entitlements — with the evidenc…☆24Oct 4, 2026Updated 3 weeks ago
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- ☆11Mar 25, 2026Updated 7 months ago
- Public Data Set of AI Favicon WorkFlow Output☆16Jul 1, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SAML hacking pipeline for Claude Code☆13Aug 19, 2026Updated 2 months ago
- An Vulnerability detection and Exploitation tool for CVE-2024-7339☆17Aug 10, 2024Updated 2 years ago
- WebSocket Penetration Testing Toolkit for Burp Suite☆32Mar 5, 2026Updated 7 months ago
- My wife always changes the thermostat to 75F, and now I respond☆10Jun 11, 2025Updated last year
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!☆30Feb 10, 2024Updated 2 years ago
- Given a list of domains, you resolve them and get the IP addresses.☆48Mar 2, 2022Updated 4 years ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 7 months ago
- Search Engine Dorks☆12Apr 2, 2024Updated 2 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Aug 11, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A library for detecting known secrets across many web frameworks☆22Dec 14, 2025Updated 10 months ago
- Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)☆59Aug 10, 2026Updated 2 months ago
- Mitrastar MIPS router analysis and exploitation☆19Jul 25, 2021Updated 5 years ago
- ☆21Mar 4, 2023Updated 3 years ago
- PoC of Imagemagick's Arbitrary File Read☆13Jul 3, 2023Updated 3 years ago
- Match2 game clone. It includes island detection system on Grid with DFS algorithm. I also developed the Custom Unity Level Editor tool.☆16Mar 12, 2023Updated 3 years ago
- ☆42Dec 8, 2021Updated 4 years ago
- A comprehensive and hands-on workbook designed to sharpen your Active Directory penetration testing skills. Whether you're a red teamer, …☆19Feb 11, 2026Updated 8 months ago
- this tool take a list of subdomains and give you the ip for each☆20Oct 9, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- yublueflower is a security workflow to discover real-world threats using open-source tools such as urlfinder, katana, httpx, nuclei, and …☆22Oct 15, 2026Updated 2 weeks ago
- This repo contain scripts written for finding subdomains using various available tools☆28Oct 21, 2020Updated 6 years ago
- InfiniteWP Client < 1.9.4.5 - Authentication Bypass☆21Jul 28, 2021Updated 5 years ago
- Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled☆48Dec 23, 2024Updated last year
- Tool with a collection of query files to explore Microsoft Active Directory☆18Jul 20, 2023Updated 3 years ago
- PNG IDAT chunks ~ payload generator☆15Jun 14, 2016Updated 10 years ago
- SAP penetration testing Web and network cheatsheet☆17May 15, 2022Updated 4 years ago