Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

CVE-2026-120841

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8...

CVE-2026-120839

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8...

CVE-2026-120839

The Magepeople inc. WpTravelly tour-booking-manager WordPress plugin is vulnerable to Local File Inclusion (LFI) in versions 2.3.8 and below . This flaw stems from Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98), allowing an attacker to include local files on th...

CVE-2026-120839 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8...

CVE-2026-120841

The Magepeople inc. WpTravelly (tour-booking-manager) WordPress plugin is vulnerable to a Local File Inclusion (LFI) flaw in versions up to and including 2.3.8 . The root cause is identified as an Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98). This allows an a...

CVE-2026-120841 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8...

tirreno

tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse that...

BYOSI

BYOSI Evade EDR's the simple way, by not touching any of the API's they hook. Theory I've noticed that most EDRs fail to scan scripting files, treating them merely as text files. While this might be unfortunate for them, it's an opportunity for us to profit. Flashy methods like residing in memory...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. !Install On Ubuntuhttps://github.com/yasserbdj96/hiphp/actions/workflows/ubuntu-install.yml/badge....

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub Contents About Who it's for Securit...

SecurityNotFound

404 Page Not Found Webshell 📼 Clone me! Clone or download the project: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Installation" The src/404.php file should be located on the target server and it must have the ability to execute .php files. Here is an example of som...

wordpress-shell

wordpress-shell Cheap & Nasty Wordpress Command Execution Shell. Execute Commands as the webserver you are serving wordpress with! Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Install To install the shell, we are assuming you have administrative access to the Wordpress...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

github-search

github-search A collection of tools to perform searches on GitHub. Install git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt Most of the time GitHub requires a token to perform searches. You can create a .tokens file in the cloned repo directory...

PHP-Fuzzer

PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries particularly parsing libraries by feeding them "random" inputs. Feedback from edge coverage instrumentation is used to guide the choice of "random" inputs, such that new code paths are visited...

FUSE

FUSE FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload UEFU vulnerabilities. The details of the testing strategy is in our paper, "FUSE: Finding File Upload Bugs via Penetration Testing", which appeared in NDSS 2020. To see how to configure and execute...

XPL-SEARCH

XPL SEARCH Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of databases which...