phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester for PHP websites running with Apache and NGINX systems PHP-FPM and PHP-CGI Using a standard cable/DSL connection, this attack can flood a Linux web server’s CPU and RAM using standard HTTP requests. This attack effec...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 batch scanning and exploitation script. PHPUnit is a PHP-based testing framework. There is a security vulnerability in the Util/PHP/eval-stdin.php file in PHPUnit versions prior to 4.8.28 and 5.x versions prior to 5.6.3. Remote attackers can exploit this vulnerability ...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

versionscan

versionscan Versionscan es una herramienta para evaluar la versión de PHP que tienes instalada actualmente y compararla con CVE conocidas y las versiones en las que se corrigieron, para informar sobre posibles problemas. TEN EN CUENTA: El trabajo aún está en progreso para adaptar la herramienta a...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

wpBullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

SecurityNotFound

404 Página No Encontrada Webshell 📼 ¡Clóname! Clona o descarga el proyecto: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Instalación" El archivo src/404.php debe ubicarse en el servidor objetivo y debe tener la capacidad de ejecutar archivos .php. Aquí hay un ejemplo...

CVE-2026-37068

CVE-2026-37068 Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the application via a specially crafted POST request to the affected...

joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5. Démo : https://www.youtube.com/watch?v=twqYpn1ir4o...

csaf

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA es una aplicación web hecha en PHP/MySQL que es extremadamente vulnerable. Su principal objetivo es ayudar a profesionales de seguridad a poner a prueba sus habilidades y herramientas en un entorno legal, ayudar a desarrolladore...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

snuffleupagus

Snuffleupagus Módulo de seguridad para php7 y php8: ¡eliminando clases de bugs y aplicando parches virtuales al resto! Características principales • Descarga • Ejemplos • Documentación • Licencia • Agradecimientos Snuffleupagus es un módulo de PHP 7+ y 8+ diseñado para aumentar drásticamente el...

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recently we found a vulnerability in /type.php of phpcms 2008 source code. When attackers send crafted requests like "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", evil content in this case "@unlinkFILE;assert$POST1;" will be written into cache file in this...

CVE-2026-49085

CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...

CVE-2018-1000533

GitList 0.6.0 Remote Code Execution Vulnerability CVE-2018-1000533 GitList is a modern Git repository viewer. In GitList versions 0.6.0 and below, there is a vulnerability that passes improperly validated input to system functions, allowing arbitrary commands to be executed with PHP user...

exploit-CVE-2020-5844

Exploit for CVE-2020-5844 Pandora FMS v7.0NG.742 - Remote Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description...

slopShell

slopShell webshell en PHP Como metí la pata y olvidé hablar sobre el uso, aquí va. Para que este shell funcione, necesitas 2 cosas: una víctima que permita la subida de archivos PHP tú mismo, en un entorno educativo y una forma de enviar peticiones HTTP a este webshell el script cliente es la mej...