Contribute to MorFix/php-rce-exploitation development by creating an account on GitHub.

Static & dynamic analysis of a Windows dropper with ATT&CK mapping and YARA/Sigma detections - Maysalk/desertshade-malware-analysis

Contribute to kjayavardhan02/SecHedr-Burp-Extension development by creating an account on GitHub.

Fleet-wide audit, remediation & IOC scan for CVE-2026-109618/109619 (php2shell). Finds every PHP build ea-php/alt-php/lsphp not just `php -v`. Read-only, no exploit code. - Magicalname/php2...

Fix PHP2Shell (CVE-2026-109618 & CVE-2026-109619) PHP RCE vulnerabilities and automatically convert any WordPress or PHP website to a fast Next.js site. - AGI-CEO/php2shell-wordpress-to-nextjs-mcp

Full RCE PoC: PHP session.upload_progress -> session file -> LFI -> shell. 2018-class technique (any PHP >= 5.4), NOT CVE-2026-109618/19. Authorised testing only. - Pour...

Payloads, notes, and walkthroughs for PortSwigger Web Security Academy labs (SQLi, XSS, CSRF, Authentication). - khadijaikram-3/portswigger-notes

This project help us to learn how Microsoft Excel file can give us command and control and bypass windows defender. - huzaifa818/Microsoft-Excel-VBA-Discord-C2

Scans a synthetic 100,000-record SQLite database for exposed emails, phone numbers and credentials using regex and YARA rules. Independent side project. - HetalK4/sensitive-data-discovery-scanner

.NET malware reverse engineering with dnSpy: decompilation, patching, deobfuscation and YARA detection - Maysalk/malware-reverse-engineering

Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 / CVE-2026-109619 - VABISMO/php2shell-nginx-fpm-full-rce

Secure cloud-native microservices: Python (Django) auth service issuing JWTs via JWKS + Java 21 Spring Boot orders service, behind a Traefik gateway, with Prometheus/Grafana alerting, Kubernetes ma...

Contribute to HackfutSecRoot/Magento_Exploit development by creating an account on GitHub.

Layered AWS WAF virtual patch for the PHP2Shell RCE vulnerabilities (CVE-2026-109618 / CVE-2026-109619): Terraform, managed + custom rules, Count-to-Block rollout, detection and tests - amahjoshdev...

php2shell-enterprise-hardening (CVE-2026-109618 / CVE-2026-109619) - Hyperscale Defense-in-Depth, Non-Breaking Mitigations & Instant Immunity Auditor for PHP Pre-Auth RCE. - mc493/php2shell...

🛡️ CVE-2026-109618 / CVE-2026-109619 PHP Exploit Scanner | *A unified scanner and exploitation tool for critical PHP vulnerabilities* - CCNAHLHQ/php2shell_scan

Lightweight remote management framework(Tailscale as C2) using embedded Tailscale (WireGuard mesh) for secure P2P communication - crpr777/remote-mgmt

Working RCE PoCs: php2shell-8512 on FULLY-PATCHED PHP 8.5.12 (session-gaps, one-shot+interactive, demo video) + session poisoning -> LFI -> RCE (8.5.11). - rafalohaki/php2shell-poc

Free Bash script to check servers, SSH hosts and Docker containers for the PHP2Shell RCE flaws (CVE-2026-109618 & CVE-2026-109619). Read-only. Flags PATCHED, VULNERABLE or unsupported PHP v...

Fast, concurrent and non-intrusive exposure auditor in Go for GitLab CE/EE unauthenticated RCE (CVE-2026-110264 - CVSS 10.0) - xaviware/go-gitlab-cve-2026-110264-scanner

check for the recent php CVE , the rce exploit is pretty ez yet github is blocking it's posting , stale data left in freed heap → leak the pointers & land controlled data in the s...