Repository Index

Malware Configuration And Payload Extraction

• configs
• debugging-tools
• malware
• malware-analysis

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

• cve-2026-109618
• cve-2026-109619
• detection-rules
• exploit

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

• chat-archive
• python
• secret-scanning
• sqlite

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

A micro HTTP Web client for MicroPython (used on Pycom modules & ESP32)

• micropython
• esp32
• pycom
• web-client

A micro JSON REST Web client based on MicroWebCli for MicroPython (used on Pycom modules & ESP32)

• micropython
• esp32
• pycom
• json