1.ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
+132 stars
from 1,790 · score 4.89
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
4 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.devploit / php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
+106 stars
from 161 · score 4.67
3.JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
+4 stars
from 107 · score 1.61
4.dinosn / php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
+2 stars
from 111 · score 1.10