Explore Topics Trending Collections Events GitHub Sponsors

php-exploit

Here are 8 public repositories matching this topic...

Language: All

ikow / php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

exploit poc rce php-security wordpress-security detection-rules vulnerability-research suricata-rules waf-rules php-exploit session-upload-progress cve-2026-109618 cve-2026-109619 php2shell

Updated Oct 28, 2026
Python

devploit / php2shell

Star

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

Updated Oct 30, 2026
Python

Cvar1984 / pload

Sponsor

Star

Convenient way to bypass PHP disabled functions with LD_PRELOAD to create gsocket connection

linux ldpreload bypass hacktoberfest php-exploit gsocket bypass-disable-function

Updated Dec 14, 2024
PHP

naravid19 / php2shell-ioc

Star

Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).

php ioc exploit poc rce php-security wordpress-security detection-rules vulnerability-research waf-rules php-exploit ioc-analysis cve-2026-109618 cve-2026-109619 php2shell

Updated Nov 7, 2026
HTML

richardschwabe / chankro3

Star

Exploit mail function in php when admin disabled other functions like shell. Uses LD_PRELOAD

php exploit pentesting cyber cyber-security pentest-scripts pentesting-tools php-exploit

Updated Aug 8, 2023
PHP

mahumadad / php2shell-analysis

Star

Working RCE exploit, IDS/WAF detection rules (Suricata, ModSecurity, Sigma, Cloudflare), Docker lab, and full analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Only public exploit covering the serializer mismatch → POP chain that bypasses upload_progress mitigations.