CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Repository Index
79,350 visible repositories in the index
241–264 of 285 · Most stars
Automatically exported from code.google.com/p/creddump
Advanced, but minimalistic Next.js and Apollo starter
- typescript
- react
- apollo
- testing-library
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
A post exploitation framework for advanced Red Team operations
- active-directory
- adversary-simulation
- c2
- c2-framework
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Ephemeral root via the CVE-2026-43284 page-cache exploit
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
- cryptography
- hacking
- system
- cheatsheet
Android Framework for Exploitation, is a framework for exploiting android based devices
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Encrypted Chat. No History. No Logs.
- encryption
- nacl
- chat
- secure
collection of C/C++ programs that try to get compilers to exploit undefined behavior
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
Utility that exposes the expiry of TLS certificates as Prometheus metrics
Automatically exported from code.google.com/p/jsunpack-n
Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.
🗄EOS Tracker: Real time block explorer for EOS Blockchain
- eos
- blockchain
- tracker
- crypto
Public repository for improvements to the EXTRABACON exploit
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Fast, compact 64/128/256-bit non-crypto hash suite (Rainbow & Rainbow 2) passing SMHasher3, plus experimental Rainstorm. C++ and Node.js/Wasm API & CLI
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
Detect and log CVE-2019-19781 scan and exploitation attempts.