Repository Index

CTF framework and exploit development library

• ctf
• exploit
• python
• pwntools

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

• awesome
• awesome-list
• hacking
• search-engine

The best tool for finding one gadget RCE in libc.so.6

• ctf
• pwnable
• pwn
• glibc

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

• cve-2026-109618
• cve-2026-109619
• detection-rules
• exploit

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption