php-exploit

Here are 8 public repositories matching this topic...

ikow / php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

exploit poc rce php-security wordpress-security detection-rules vulnerability-research suricata-rules waf-rules php-exploit session-upload-progress cve-2026-109618 cve-2026-109619 php2shell

Updated Oct 28, 2026
Python

devploit / php2shell

Star

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

Updated Oct 30, 2026
Python

Cvar1984 / pload

Sponsor

Star

Convenient way to bypass PHP disabled functions with LD_PRELOAD to create gsocket connection

linux ldpreload bypass hacktoberfest php-exploit gsocket bypass-disable-function

Updated Dec 14, 2024
PHP

richardschwabe / chankro3

Star

Exploit mail function in php when admin disabled other functions like shell. Uses LD_PRELOAD

php exploit pentesting cyber cyber-security pentest-scripts pentesting-tools php-exploit

Updated Aug 8, 2023
PHP

naravid19 / php2shell-ioc

Star

Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).

php ioc exploit poc rce php-security wordpress-security detection-rules vulnerability-research waf-rules php-exploit ioc-analysis cve-2026-109618 cve-2026-109619 php2shell

Updated Oct 30, 2026
HTML

mahumadad / php2shell-analysis

Star

Working RCE exploit, IDS/WAF detection rules (Suricata, ModSecurity, Sigma, Cloudflare), Docker lab, and full analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Only public exploit covering the serializer mismatch → POP chain that bypasses upload_progress mitigations.

exploit deserialization poc php-security modsecurity detection-rules upload-progress suricata-rules sigma-rules waf-rules php-exploit php-rce cve-2026-109618 cve-2026-109619 php2shell heap-uaf pop-chain session-exploit

Updated Oct 24, 2026
Python

dr4xp / unserialize-exploit

Star

For StuxCTF on TryHackMe...

linux bash tools hack hacking ctf hacks ethical-hacking unserialize ctfs hackthebox hacking-tools ethical-hacking-tools tryhackme php-exploit unserialize-exploit stuxctf

Updated Sep 11, 2025
Python

b4dScript / pseudo-RCE

Star

A pseudo rce explotation console, great to play ctfs and getting a reverse shell

python rce pentesting exploitation hackthebox php-exploit

Updated Nov 15, 2024
Python

Add this topic to your repo

To associate your repository with the php-exploit topic, visit your repo's landing page and select "manage topics."

Learn more

📋 Server Request & Proxy Logs

⚙️ Pengaturan Proxy Target

php-exploit

Here are 8 public repositories matching this topic...

ikow / php2shell-poc

devploit / php2shell

Cvar1984 / pload

richardschwabe / chankro3

naravid19 / php2shell-ioc

mahumadad / php2shell-analysis

dr4xp / unserialize-exploit

b4dScript / pseudo-RCE

Add this topic to your repo