cve-2019-11043

PHP Remote Code Execution Vulnerability CVE-2019-11043 1. Background On September 26, PHP officially released a vulnerability advisory pointing out that servers using Nginx + php-fpm, under certain configurations, have a remote code execution vulnerability. Moreover, this configuration is widely...

kadimus

kadimus LFI Scan & Exploit Tool kadimus is a tool to check for and exploit LFI vulnerabilities, with a focus on PHP systems. Features: Check all url parameters /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE expect://cmd RCE Source code disclosure Command shell...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...

DDoS-PHP-Script

DDoS PHP Script Script to perform a DDoS UDP flood by PHP Usage From web server visit the page: http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER From terminal: php ./ddos.php host=TARGET port=PORT time=SECONDS packet=NUMBER bytes=NUMBER Parameters...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as well as files usi...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detecta archivos PHP potencialmente maliciosos. ¿Qué detecta? PHP-malware-finder hace todo lo posible para detectar código ofuscado/sospechoso, así com...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – PHP Filter Chain Arbitrary File Read Program Code PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper include"php://filter/convert.base64-encode/resource...

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...

cve-2022-23636-poc

CVE-2022-23626 - m1k1o's Blog Authenticated RCE Authenticated Remote Code Execution via file upload vulnerability in m1k1o's Blog v1.3 and below. Description The ajax.php?action=uploadimage endpoint does not properly validate uploaded file types, allowing an authenticated user to upload a PHP...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI Remote Code Execution RCE Exploit A Python-based exploit for CVE-2012-1823. This vulnerability allows an attacker to execute arbitrary code on a server running a vulnerable version of PHP-CGI by injecting command-line arguments via the query string. 📝 Vulnerability Overvie...

Yii2 PHP Framework < 2.0.52 - Remote Code Execution

Yii2 PHP Framework before 2.0.52 is vulnerable to remote code execution via improper validation of the class key in JSON behaviors. An attacker can instantiate arbitrary PHP classes and achieve RCE. id: CVE-2024-58136 info: name: Yii2 PHP Framework 2.0.52 - Remote Code Execution author:...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

collision-webshell

Webshell Collision This repository contains 2 files that have the same MD5 hash: webshell.php normal.php MD5 for the files: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump for the webshell.php: $ hexdump -C webshell.php 00000000 3c 3...

CVE-2026-36239

CVE-2026-36239 CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend sitecopyright Vulnerability Overview: A critical remote code execution RCE vulnerability has been identified in the sitecopyright functionality of the PbootCMS backend administration interface. Specifically, untrusted...