🚨 GitHub 监控消息提醒
🚨 发现关键词: #Shellcode #Loader #Evasion
📦 项目名称: Winx86_64-Encoded-Shellcode-Loader
👤 项目作者: aghaasfandyarkhan
🛠 开发语言: Rust
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:58:56
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Shellcode #Loader #Evasion
📦 项目名称: Winx86_64-Encoded-Shellcode-Loader
👤 项目作者: aghaasfandyarkhan
🛠 开发语言: Rust
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:58:56
📝 项目描述:
This is the another version of Shellcode Loader where I encoded the URL using XOR single byte and it mostly performs signature based evasion and sometimes Full Windows Antivirus Evasion too.🔗 点击访问项目地址
GitHub
GitHub - aghaasfandyarkhan/Winx86_64-Encoded-Shellcode-Loader: This is the another version of Shellcode Loader where I encoded…
This is the another version of Shellcode Loader where I encoded the URL using XOR single byte and it mostly performs signature based evasion and sometimes Full Windows Antivirus Evasion too. - agha...
🚨 GitHub 监控消息提醒
🚨 发现关键词: #YARA #malware
📦 项目名称: guardiao
👤 项目作者: EduardoMilani8
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:00:45
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #YARA #malware
📦 项目名称: guardiao
👤 项目作者: EduardoMilani8
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:00:45
📝 项目描述:
Antivírus para Linux: bloqueia ameaças antes de executarem, vigia downloads e processos e varre o sistema com ClamAV, YARA e hashes do MalwareBazaar🔗 点击访问项目地址
GitHub
GitHub - EduardoMilani8/guardiao: Antivírus para Linux: bloqueia ameaças antes de executarem, vigia downloads e processos e varre…
Antivírus para Linux: bloqueia ameaças antes de executarem, vigia downloads e processos e varre o sistema com ClamAV, YARA e hashes do MalwareBazaar - EduardoMilani8/guardiao
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Nuclei #CVE
📦 项目名称: rag-web-vulnerability-scanner
👤 项目作者: SHANMUGAMvenkat
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:52:50
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Nuclei #CVE
📦 项目名称: rag-web-vulnerability-scanner
👤 项目作者: SHANMUGAMvenkat
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:52:50
📝 项目描述:
Python pipeline combining Nmap, Wapiti, Nuclei and SQLMap with a RAG layer that checks scan results against live NVD/CVE data. MSc project.🔗 点击访问项目地址
GitHub
GitHub - SHANMUGAMvenkat/rag-web-vulnerability-scanner: Python pipeline combining Nmap, Wapiti, Nuclei and SQLMap with a RAG layer…
Python pipeline combining Nmap, Wapiti, Nuclei and SQLMap with a RAG layer that checks scan results against live NVD/CVE data. MSc project. - SHANMUGAMvenkat/rag-web-vulnerability-scanner
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: shiyas-vulnhub
👤 项目作者: shiyasibrahim222-max
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:02:44
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: shiyas-vulnhub
👤 项目作者: shiyasibrahim222-max
🛠 开发语言: TypeScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:02:44
📝 项目描述:
vulnerability scanner🔗 点击访问项目地址
GitHub
GitHub - shiyasibrahim222-max/shiyas-vulnhub: vulnerability scanner
vulnerability scanner. Contribute to shiyasibrahim222-max/shiyas-vulnhub development by creating an account on GitHub.
🚨 GitHub 监控消息提醒
🚨 发现关键词: #RCE #CVE
📦 项目名称: CVE-2026-78818-cyberpanel-phpselection-rce
👤 项目作者: ammarkrblt
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:00:16
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #RCE #CVE
📦 项目名称: CVE-2026-78818-cyberpanel-phpselection-rce
👤 项目作者: ammarkrblt
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 14:00:16
📝 项目描述:
CVE-2026-78818 - CyberPanel <= 2.4.7 authenticated root RCE via phpSelection command injection + cloudAPI WAF bypass🔗 点击访问项目地址
GitHub
GitHub - ammarkrblt/CVE-2026-78818-cyberpanel-phpselection-rce: CVE-2026-78818 - CyberPanel <= 2.4.7 authenticated root RCE via…
CVE-2026-78818 - CyberPanel <= 2.4.7 authenticated root RCE via phpSelection command injection + cloudAPI WAF bypass - ammarkrblt/CVE-2026-78818-cyberpanel-phpselection-rce
🚨 GitHub 监控消息提醒
🚨 发现关键词: #XSS #Stored #Reflected
📦 项目名称: DVWA-Cross-Site-Scripting-XSS
👤 项目作者: shaikhkameel68-debug
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:15:16
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #XSS #Stored #Reflected
📦 项目名称: DVWA-Cross-Site-Scripting-XSS
👤 项目作者: shaikhkameel68-debug
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 13:15:16
📝 项目描述:
Hands-on Cross-Site Scripting (XSS) penetration testing using DVWA on Metasploitable 2. Covers Reflected XSS and Stored XSS vulnerabilities with practical payload demonstrations, JavaScript alert testing, screenshots, vulnerability analysis, and security remediation techniques.🔗 点击访问项目地址
GitHub
GitHub - shaikhkameel68-debug/DVWA-Cross-Site-Scripting-XSS: Hands-on Cross-Site Scripting (XSS) penetration testing using DVWA…
Hands-on Cross-Site Scripting (XSS) penetration testing using DVWA on Metasploitable 2. Covers Reflected XSS and Stored XSS vulnerabilities with practical payload demonstrations, JavaScript alert t...
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Exploit #CVE
📦 项目名称: Exploit-Clock
👤 项目作者: ArqumUmais
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:03:36
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Exploit #CVE
📦 项目名称: Exploit-Clock
👤 项目作者: ArqumUmais
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:03:36
📝 项目描述:
Kimball-style data warehouse tracking each CVE from NIST NVD disclosure to CISA KEV exploitation and its remediation deadline. Three fact tables, six dimensions and a weighted weakness bridge answer ten business questions on exploitation speed, vendor exposure, ransomware links and weakness types. Built on PostgreSQL.🔗 点击访问项目地址
GitHub
GitHub - ArqumUmais/Exploit-Clock: Kimball-style data warehouse tracking each CVE from NIST NVD disclosure to CISA KEV exploitation…
Kimball-style data warehouse tracking each CVE from NIST NVD disclosure to CISA KEV exploitation and its remediation deadline. Three fact tables, six dimensions and a weighted weakness bridge answe...
❤3🔥2🥰1👏1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Exploit #CVE
📦 项目名称: CVE-2026-109618
👤 项目作者: WKL-Sec
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:02:37
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Exploit #CVE
📦 项目名称: CVE-2026-109618
👤 项目作者: WKL-Sec
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:02:37
📝 项目描述:
High-level notes for CVE-2026-109618 in PHP mod_php. Exploit code is not included.🔗 点击访问项目地址
GitHub
GitHub - WKL-Sec/CVE-2026-109618: High-level notes for CVE-2026-109618 in PHP mod_php. Exploit code is not included.
High-level notes for CVE-2026-109618 in PHP mod_php. Exploit code is not included. - WKL-Sec/CVE-2026-109618
❤3🥰2👏2😁1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Nuclei #POC
📦 项目名称: dsh-purge-optimized
👤 项目作者: lzzzz666888
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:06:42
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Nuclei #POC
📦 项目名称: dsh-purge-optimized
👤 项目作者: lzzzz666888
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:06:42
📝 项目描述:
dsh-purge 优化版(衍生分支):在上游 1.1.90 基础上恢复技能库 23 个技能、POC/EXP 知识库与本地靶场白名单,并补齐 nuclei 模板类目筛选与翻页。Derivative of dsh-purge — restores the skill library, knowledge base and local-lab allowlist.🔗 点击访问项目地址
GitHub
GitHub - lzzzz666888/dsh-purge-optimized: dsh-purge 优化版(衍生分支):在上游 1.1.90 基础上恢复技能库 23 个技能、POC/EXP 知识库与本地靶场白名单,并补齐 nuclei 模板类目筛选与翻页。Derivative…
dsh-purge 优化版(衍生分支):在上游 1.1.90 基础上恢复技能库 23 个技能、POC/EXP 知识库与本地靶场白名单,并补齐 nuclei 模板类目筛选与翻页。Derivative of dsh-purge — restores the skill library, knowledge base and local-lab allowlist. - lzzzz666888/d...
👏5❤2😁2🥰1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #CVE-2026 #POC
📦 项目名称: CVE-2026-120019-w3tc-mfunc-comment-xss-poc
👤 项目作者: Hassham1
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:26:15
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #CVE-2026 #POC
📦 项目名称: CVE-2026-120019-w3tc-mfunc-comment-xss-poc
👤 项目作者: Hassham1
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:26:15
📝 项目描述:
无描述🔗 点击访问项目地址
GitHub
GitHub - Hassham1/CVE-2026-120019-w3tc-mfunc-comment-xss-poc
Contribute to Hassham1/CVE-2026-120019-w3tc-mfunc-comment-xss-poc development by creating an account on GitHub.
🥰4👍3❤2🔥2👏1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #漏洞 #利用
📦 项目名称: AppDump
👤 项目作者: yAngbin1108
🛠 开发语言: Unknown
⭐ Star数量: 3 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:22:38
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #漏洞 #利用
📦 项目名称: AppDump
👤 项目作者: yAngbin1108
🛠 开发语言: Unknown
⭐ Star数量: 3 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:22:38
📝 项目描述:
小白谨慎下载,目前修复闪退有砸壳提取功能 此为通用版版,若重启闪退请立即删除!!️利用的DarksWord漏洞故只支持iOS17-18.7.1 iOS26-26.0.1 A19和M5芯片及以上不支持(内核漏洞的运行借鉴的是lara(致谢),希望大家可以去看看哈)适用于那些使用 lara 会重启的用户,仓库已停止更新🔗 点击访问项目地址
GitHub
GitHub - yAngbin1108/AppDump: 小白谨慎下载,目前修复闪退有砸壳提取功能 此为通用版版,若重启闪退请立即删除!!️利用的DarksWord漏洞故只支持iOS17-18.7.1 iOS26-26.0.1 A19和M5芯片及以上…
小白谨慎下载,目前修复闪退有砸壳提取功能 此为通用版版,若重启闪退请立即删除!!️利用的DarksWord漏洞故只支持iOS17-18.7.1 iOS26-26.0.1 A19和M5芯片及以上不支持(内核漏洞的运行借鉴的是lara(致谢),希望大家可以去看看哈)适用于那些使用 lara 会重启的用户,仓库已停止更新 - yAngbin1108/AppDump
👍3🔥2🥰2👏2❤1😁1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: webscan-lite
👤 项目作者: siddeshsivakumar25-gif
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:52:53
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: webscan-lite
👤 项目作者: siddeshsivakumar25-gif
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 15:52:53
📝 项目描述:
Lightweight web vulnerability scanner — safe, non-destructive security checks🔗 点击访问项目地址
GitHub
GitHub - siddeshsivakumar25-gif/webscan-lite: Lightweight web vulnerability scanner — safe, non-destructive security checks
Lightweight web vulnerability scanner — safe, non-destructive security checks - siddeshsivakumar25-gif/webscan-lite
❤4👍2😁2🔥1🥰1👏1
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Burp #Extension
📦 项目名称: Path-Traversal-Burp-Extension
👤 项目作者: lamdreeper-create
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:25:21
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Burp #Extension
📦 项目名称: Path-Traversal-Burp-Extension
👤 项目作者: lamdreeper-create
🛠 开发语言: Java
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:25:21
📝 项目描述:
Burp Suite Extension for Path Traversal Testing🔗 点击访问项目地址
GitHub
GitHub - lamdreeper-create/Path-Traversal-Burp-Extension: Burp Suite Extension for Path Traversal Testing
Burp Suite Extension for Path Traversal Testing. Contribute to lamdreeper-create/Path-Traversal-Burp-Extension development by creating an account on GitHub.
🚨 GitHub 监控消息提醒
🚨 发现关键词: #XSS #DOM
📦 项目名称: talk-itcc-xss-fix-lab
👤 项目作者: norrisaftcc
🛠 开发语言: HTML
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:54:16
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #XSS #DOM
📦 项目名称: talk-itcc-xss-fix-lab
👤 项目作者: norrisaftcc
🛠 开发语言: HTML
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:54:16
📝 项目描述:
无描述🔗 点击访问项目地址
GitHub
GitHub - norrisaftcc/talk-itcc-xss-fix-lab
Contribute to norrisaftcc/talk-itcc-xss-fix-lab development by creating an account on GitHub.
🚨 GitHub 监控消息提醒
🚨 发现关键词: #XSS #Stored #Reflected #DOM
📦 项目名称: Demonstration-of-Cross-Site-Scripting-XSS-Attacks
👤 项目作者: 7sky-dev
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:46:33
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #XSS #Stored #Reflected #DOM
📦 项目名称: Demonstration-of-Cross-Site-Scripting-XSS-Attacks
👤 项目作者: 7sky-dev
🛠 开发语言: JavaScript
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:46:33
📝 项目描述:
无描述🔗 点击访问项目地址
GitHub
GitHub - 7sky-dev/Demonstration-of-Cross-Site-Scripting-XSS-Attacks
Contribute to 7sky-dev/Demonstration-of-Cross-Site-Scripting-XSS-Attacks development by creating an account on GitHub.
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Weblogic #CVE
📦 项目名称: solgases-inventory-platform
👤 项目作者: JairoCastanedaP
🛠 开发语言: Java
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 06:58:31
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Weblogic #CVE
📦 项目名称: solgases-inventory-platform
👤 项目作者: JairoCastanedaP
🛠 开发语言: Java
⭐ Star数量: 1 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 06:58:31
📝 项目描述:
Modular Java 21/Spring Boot REST API for SOLGASES catalog, inventory, and access management. Built with Spring Security (JWT/Argon2id), Spring Data JPA, MySQL, and Maven; documented with OpenAPI/Swagger; tested with JUnit, Mockito, ArchUnit, and JaCoCo; delivered through Jenkins CI/CD and SonarQube to WebLogic.🔗 点击访问项目地址
GitHub
GitHub - JairoCastanedaP/solgases-inventory-platform: Modular Java 21/Spring Boot REST API for SOLGASES catalog, inventory, and…
Modular Java 21/Spring Boot REST API for SOLGASES catalog, inventory, and access management. Built with Spring Security (JWT/Argon2id), Spring Data JPA, MySQL, and Maven; documented with OpenAPI/Sw...
🚨 GitHub 监控消息提醒
🚨 发现关键词: #YARA #rule #rules
📦 项目名称: yaraci
👤 项目作者: VirajVShetty
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:58:52
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #YARA #rule #rules
📦 项目名称: yaraci
👤 项目作者: VirajVShetty
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:58:52
📝 项目描述:
A CI harness for YARA rule quality that lints rules, proves they fire on fixtures, scans goodware for false positives, profiles scan cost and diffs rule versions.🔗 点击访问项目地址
GitHub
GitHub - VirajVShetty/yaraci: A CI harness for YARA rule quality that lints rules, proves they fire on fixtures, scans goodware…
A CI harness for YARA rule quality that lints rules, proves they fire on fixtures, scans goodware for false positives, profiles scan cost and diffs rule versions. - VirajVShetty/yaraci
🚨 GitHub 监控消息提醒
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: python-vulnerability-scanner
👤 项目作者: shashank14012023-lgtm
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:58:31
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #Vulnerability Scanner
📦 项目名称: python-vulnerability-scanner
👤 项目作者: shashank14012023-lgtm
🛠 开发语言: Unknown
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 16:58:31
📝 项目描述:
A python-based network vulnerability scanner 🔗 点击访问项目地址
GitHub
GitHub - shashank14012023-lgtm/python-vulnerability-scanner: A python-based network vulnerability scanner
A python-based network vulnerability scanner . Contribute to shashank14012023-lgtm/python-vulnerability-scanner development by creating an account on GitHub.
🚨 GitHub 监控消息提醒
🚨 发现关键词: #CVE-2026 #POC #Exploit
📦 项目名称: CVE-2026-118306
👤 项目作者: al4n4n
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 17:42:14
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #CVE-2026 #POC #Exploit
📦 项目名称: CVE-2026-118306
👤 项目作者: al4n4n
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 17:42:14
📝 项目描述:
CVE-2026-118306: Chromium FileSystemAccessManagerImpl Use-After-Free (CVSS 9.6) - PoC, checker, detection rules🔗 点击访问项目地址
GitHub
GitHub - al4n4n/CVE-2026-118306: CVE-2026-118306: Chromium FileSystemAccessManagerImpl Use-After-Free (CVSS 9.6) - PoC, checker…
CVE-2026-118306: Chromium FileSystemAccessManagerImpl Use-After-Free (CVSS 9.6) - PoC, checker, detection rules - al4n4n/CVE-2026-118306
🚨 GitHub 监控消息提醒
🚨 发现关键词: #CVE-2026 #Exploit
📦 项目名称: cloudflare-php-ctf-research
👤 项目作者: ncpz
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 17:35:29
📝 项目描述:
🔗 点击访问项目地址
🚨 发现关键词: #CVE-2026 #Exploit
📦 项目名称: cloudflare-php-ctf-research
👤 项目作者: ncpz
🛠 开发语言: Python
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-04 17:35:29
📝 项目描述:
Research writeup: php2shell (CVE-2026-109618/109619) vs the Cloudflare PHP CTF — complete local chain, WAF lock analysis, original findings🔗 点击访问项目地址
GitHub
GitHub - ncpz/cloudflare-php-ctf-research: Research writeup: php2shell (CVE-2026-109618/109619) vs the Cloudflare PHP CTF — complete…
Research writeup: php2shell (CVE-2026-109618/109619) vs the Cloudflare PHP CTF — complete local chain, WAF lock analysis, original findings - ncpz/cloudflare-php-ctf-research