A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory. - 9bie/php2shell-bypass-aslr-exp

Moat WAF 是一款基于 OpenResty (nginx + Lua) 的 Web 应用防火墙，为 Web 应用提供 HTTP/HTTPS 流量检测、威胁识别和请求过滤能力。 - ligg/moatwaf

Learning Xss. Contribute to Mouley-2806/XssGuard development by creating an account on GitHub.

Contribute to Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab development by creating an account on GitHub.

Static Windows PE malware analysis tool with optional YARA scanning and detailed security reports. - MatiSec1/Malware-Detect

PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE) - basesixtythree/B63-POC-CVE-2026-63077

Status brief on the PHP2Shell RCE vulnerabilities (CVE-2026-109618 / CVE-2026-109619) - rajasekharponakala/php2shell-brief

Shellcode Handcrafted & Engineered at Low Level (S.H.E.L.L.) is a repository that aims to create a collection of handmade (also not vibe-coded) custom shellcodes - daemoncibsec/S.H.E.L.L.

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management. - yyhuni/lunafox

Contribute to IamSaishi/PHP2Shell-Nuclei-Detection-Template development by creating an account on GitHub.

Lexical SQL injection vulnerability scanner, AST query sanitizer, and parameterized statement verifier - alphaparkinc/genpark-sql-injection-and-ast-query-sanitizer-skill

Contribute to anmolksachan/php2shell development by creating an account on GitHub.

PoC and verification material for CVE-2023-46604 (Apache ActiveMQ OpenWire marshaller RCE) - basesixtythree/B63-POC-CVE-2023-46604

CVE-2026-109618 / CVE-2026-109619 - one-shot pre-auth RCE on stock PHP 8.4.26 (Apache mod_php), single-file pure-HTTP PoC - LHeiakim/php2shell-full-poc

基于 Flask 的个人博客系统：用户认证、文章管理、标签归档、评论互动与分页，实践密码哈希与越权防护 | Python3 + Flask + SQLAlchemy + SQLite + Tailwind CSS - Hgb-2005/flask-blog

PHP2Shell - PHP version scanner + PHP2Shell exploitation framework (CVE-2026-109618 / CVE-2026-109619). Auto dorking, country filter, WAF/403 bypass, HTML reports. - 0xgetz/php2shell

Zero-dependency Python PoC & Docker Compose reproduction for CVE-2026-109619 via PHP RFC1867 upload progress and opcache.preload. (133 characters) - bigb0x/php2shell-poc

An automation to automatically and preiodically look for and pull yara rules and malware samples based on those rules. - whisperer1290/YARA-Pull

Reference briefings for Java supply-chain security incidents (Log4Shell, Spring4Shell) - mcpmark-eval-liuhezi/security-briefings

跨平台发票抓取工具. Contribute to WeiKKJ/waf-bypass development by creating an account on GitHub.

CVE-2026-109619: cross-request UAF in PHP session.upload_progress — reproduction, root-cause analysis and full chain to RCE - santihabib/CVE-2026-109619