Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
47,133 repositories indexed
73–96 of 104 · Most stars
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
🛡 Modern elixir ACL/ABAC library for managing granular user abilities and permissions
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
Text-based logic question captcha's for Rails 🚫🤖
A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation
a native library implementing secp256k1 purely for the crystal language.
Micropython package for doing fast rsa and elliptic curve cryptography, specifically digital signatures
Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework
Coherence is cryptographic server for modern web apps
An opinionated helper for generating tls certificates
GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
A D Library of encryption, decryption, encode, hash, and message digital signatures.
Minimal authentication library for Ruby on Rails
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
Packing detection tool for PE files
Simple key/secret based authentication for APIs
National Vulnerability Database (NVD) implemented by rust
Quantum-resistent asymmetric key generation tool for digital signatures.
RSA signing on MicroPython
A tool for detecting viruses and NSFW material in WARC files
JSON Web Token implementation for Java according to RFC 7519. Easily create, parse and validate JSON Web Tokens using a fluent API.