Stock vulnerable wordpress RCE poc for wp2shell.
☆114Jul 18, 2026Updated 3 months ago
Alternatives and similar repositories for wp2shell-poc
Users that are interested in wp2shell-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core☆121Jul 18, 2026Updated 3 months ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆808Aug 11, 2026Updated 2 months ago
- ☆14Jul 18, 2026Updated 3 months ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) i…☆66Jul 22, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 9 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆20Oct 10, 2025Updated last year
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 2 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- ☆15Sep 24, 2026Updated last month
- Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)☆78Jun 6, 2024Updated 2 years ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.☆55Sep 28, 2026Updated last month
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆183May 12, 2026Updated 5 months ago
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- StealthBench is a benchmark for evaluating whether autonomous agents operate with the operational security (OPSEC) discipline that separa…☆13Updated this week
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- Deserialization payload generator for a variety of .NET formatters☆244Oct 21, 2026Updated last week
- A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.☆131Updated this week
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆243Sep 11, 2026Updated last month
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆62Jul 12, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare☆147Jun 17, 2026Updated 4 months ago
- Go client for Elasticsearch OSINT platform☆15Nov 4, 2023Updated 2 years ago
- ☆16Jun 14, 2026Updated 4 months ago
- Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.☆32May 11, 2026Updated 5 months ago
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 5 months ago
- converts sRDI compatible dlls to shellcode☆39Jan 20, 2025Updated last year
- A proof-of-concept to demonstrate randomized execution paths and their impact on call stack signatures — ideal for EDR testing, behavior-…☆24Jan 17, 2026Updated 9 months ago
- Next.js RCE☆52Sep 29, 2026Updated last month
- JS Enumeration & SAST☆28Oct 22, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 14, 2026Updated 2 weeks ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- Static-Code-Analysis-Helper helps you perform static code analysis.☆32Feb 20, 2026Updated 8 months ago
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 9 months ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- ctfify is a powerful command-line tool for downloading and managing Capture The Flag (CTF) challenges. With ctfify, you can easily find a…☆12Oct 4, 2025Updated last year