Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detection for Apache 2.4.66.
☆23May 6, 2026Updated 6 months ago
Alternatives and similar repositories for CVE-2026-23918-Apache-H2-PoC
Users that are interested in CVE-2026-23918-Apache-H2-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 5 months ago
- PHP CGI Argument Injection.☆12Aug 24, 2023Updated 3 years ago
- Kernel Process Termination Tool ( CVE-2026-0828 exploit)☆38Apr 2, 2026Updated 7 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- API Security University & PortSwigger Academy Study Notes☆28Nov 13, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Google Gemini API key discovery and security scanning tool.☆44Nov 2, 2026Updated last week
- A PDF generator for CVE-2025-54988☆20Sep 4, 2025Updated last year
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- A ridiculously easy setup script for a private docker registry server with NGINX☆10Nov 21, 2014Updated 11 years ago
- PS5 Exploitable FW☆14Sep 28, 2026Updated last month
- ☆128Apr 23, 2026Updated 6 months ago
- Open source desktop app and Chromium extension for capturing, organizing, and verifying web evidence in OSINT investigations. Local-first…☆18Updated this week
- A highly customizable tool that uses OCR to scrape and identify website screenshots for categorizing large datasets quickly☆12Oct 23, 2026Updated 2 weeks ago
- CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)☆63Oct 22, 2026Updated 3 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- The NeoC2 Framework☆40Oct 29, 2026Updated 2 weeks ago
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- A collection of common InfoSec tools patched to be more stealth. Contributions greatly appreciated!☆14Apr 5, 2023Updated 3 years ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- ☆16May 1, 2024Updated 2 years ago
- 🌀 My SEGA-inspired games & apps for the Dreamcast, including DreamKarts, Ridgeline, and dcvmu.com☆12Updated this week
- Borsa İstanbul verilerini indirmek üzere python temelli program☆20Dec 21, 2017Updated 8 years ago
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆27Nov 2, 2026Updated last week
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Port of llama2.c to the Dreamcast (and potentially other consoles)☆17Jan 12, 2025Updated last year
- Semgrep Rules for Detecting Magecart Skimmers and Obfuscated JavaScript☆14Mar 5, 2025Updated last year
- Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.☆32May 11, 2026Updated 6 months ago
- F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!☆11Oct 30, 2023Updated 3 years ago
- Next.js RCE☆53Sep 29, 2026Updated last month
- Free and Open-Source Chatbot Platform powered by .NET Core 3.0 and Blazor!☆14Nov 21, 2020Updated 5 years ago
- A web application that detects and displays your browser's Digital Rights Management (DRM) capabilities, including Widevine, PlayReady, a…☆16Sep 26, 2026Updated last month
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 5 months ago
- A simple, intutive, feature rich, php web shell for pen testing.☆14Feb 4, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Keycloak reset-credentials flow bypass☆19Sep 28, 2026Updated last month
- CVE-2025-32463 Proof of concept☆30Jul 1, 2025Updated last year
- Working code examples to defend against Agentic AI threats: prompt injection detection, Claude Code hooks, OPA policies, and sandbox conf…☆14Jan 27, 2026Updated 9 months ago
- Satellite Pass Predictor for Scriptable☆14Oct 25, 2025Updated last year
- HackMap — a local pentest mapping tool with real-time command execution, persistent history per target, visual attack paths, and one-clic…☆53Oct 23, 2026Updated 2 weeks ago
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- PC Fingerprinter☆11Aug 9, 2018Updated 8 years ago
Are these results useful?