Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
47,133 repositories indexed
25–45 of 45 · Most stars
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
2 Factor Authentication for Wagtail
Synthetic Adversarial Log Objects: A Framework for synthentic log generation
brute force SSH public-key authentication
JWT authentication for Pyramid
A JupyterHub authenticator for LTI
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
(UNMAINTAINED. FEEL FREE TO FORK) 🐍A Pythonic way to provide JWT authentication for Flask-GraphQL
A micro HTTP Web client for MicroPython (used on Pycom modules & ESP32)
bap - http Basic Authentication honeyPot
Lightweight driver for Microchip's Crypto Authentication secure elements written in pure python for micropython
stacked authentication policies for pyramid
Session based authentication and role based security for a Pyramid web application.
A micro JSON REST Web client based on MicroWebCli for MicroPython (used on Pycom modules & ESP32)
A ESP8266 Micropython OTP Generator
Provides LDAP authentication services for your Pyramid application based on the ldap3 package.
Authentication policy for pyramid using repoze.who 2.0 API
Use multiple authentication policies with Pyramid.
LDAP authentication policy for Pyramid