CVE-2025-34085-Multi-target

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

D-RAT_VB.NET_MySQL_PHP

D-RATVB.NETMySQLPHP D-RAT VB.NET+MySQL+PHP The project is composed of "D-RAT" server and client "D-STUB" Programming for the client and server languages: "VB.NET Framework 2" Database: "MySQL" Web page: "PHP" https://www.youtube.com/watch?v=opBbmQ5BRFk...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / root@kitploit: Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright ...

CVE-2025-56399

CVE-2025-56399 Mass Exploit CVE-2025-56399 – Remote Code Execution in laravel-file-manager v3.3.1. Exploits misconfigured config in Laravel File Manager to upload and verify a PHP shell via unauthenticated file upload. Installation Download repository root@kitploit: git clone...

laravel-poc-CVE-2018-15133

Laravel Remote Code Execution when APPKEY is leaked PoC CVE-2018-15133 This repository contains a simple Laravel 5.6.29 application on PHP 7.2.10 with one basic noop route added in routes/web.php see Dockerfile and Proof of Concept exploit cve-2018-15133.php for CVE-2018-15133 that should...

weevely3

Weevely - Shell web armamentizado Descripción Weevely es un shell web diseñado para fines de post-explotación que puede extenderse a través de la red en tiempo de ejecución. Suba el agente PHP de weevely a un servidor web objetivo para obtener acceso remoto a un shell en él. Tiene más de 30 módul...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

php-encryption

php-encryption root@kitploit: composer require defuse/php-encryption This is a library for encrypting data with a key or password in PHP. It requires PHP 5.6 or newer and OpenSSL 1.0.1 or newer. We recommend using a version of PHP that still has security support, which at the time of writing mean...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

phpsploit

Framework C2 completo que persiste silenciosamente en el servidor web mediante un oneliner PHP polimórfico...

defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...

GetDataReport

ABOUT Script in PHP+JS for get information of target through a web application, use $SERVER functions and JS functions for get information of our client. Plugin WEBApps in some web applications need to collect information from the client to perform tasks with this plugin will be easier to work wi...

HTMLawed

HTMLawed is ... ... a single-file, 45 kb PHP script that makes input text more secure, HTML standards-compliant, and suitable in general from the viewpoint of a web-page administrator, for use in the body of HTML, XHTML or XML documents. A simple HTMLTidy alternative, the htmLawed filter,...

Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE...

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recently we found a vulnerability in /type.php of phpcms 2008 source code. When attackers send crafted requests like "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", evil content in this case "@unlinkFILE;assert$POST1;" will be written into cache file in this...

carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

wpBullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation...

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...