1.ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
+132 stars
from 1,790 · score 4.89
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
14 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.devploit / php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
+106 stars
from 161 · score 4.67
3.ntfargo / Relapse-Exploit
Exploit chain for PS5 7.00 - 13.60
+76 stars
from 2,558 · score 4.34
4.The-Art-of-Hacking / h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
+75 stars
from 29,911 · score 4.33
5.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+37 stars
from 11,413 · score 3.64
6.aarsaputra / php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
+34 stars
from 87 · score 3.56
7.vitalysim / Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
+28 stars
from 17,557 · score 3.37
8.hugsy / gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
+16 stars
from 8,401 · score 2.83
9.Gallopsled / pwntools
CTF framework and exploit development library
+14 stars
from 13,790 · score 2.71
10.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+12 stars
from 6,409 · score 2.56
11.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+5 stars
from 985 · score 1.79
12.david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
+3 stars
from 2,363 · score 1.39
13.dinosn / php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
+2 stars
from 111 · score 1.10
14.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+1 stars
from 1,140 · score 0.69