burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

PHP-CVE-2023-2023-2640-POC-Escalation

Ich bin nicht verantwortlich, wenn du den Code unsachgemäß oder illegal verwendest. Der Zweck des Skripts ist rein edukativ und nichts weiter. PHP-CVE-2023-2023-2640-POC-Escalation In diesem Skript in PHP habe ich versucht, einen Exploit zu erstellen von --cve-2023-2640--privilege-escalation...

CVE-2016-16113-POC

Ottieni RCE - Exploit Bludit CMS root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Uno strumento di sfruttamento automatizzato che combina CVE-2019-17240 Bypass dell'autenticazione e CVE-2019-16113 Caricamento arbitrario di file...

CVE-2026-48908-by-yora

🔐 CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora 📌 About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...

CVE-2025-69213

CVE-2025-69213: OpenSTAManager ha una SQL Injection in ajaxcomplete.php endpoint getsedi Panoramica...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

wwwolf-php-webshell

wwwolf's PHP web shell Enfrentei frequentemente problemas ao usar outras web shells: Elas usam recursos novos de sintaxe do PHP incompatíveis com a versão antiga do PHP em execução em alguns alvos. Elas fazem suposições erradas sobre o URL remoto, quebrando a injeção de código PHP ou os parâmetro...

CVE-2025-1913-PoC

CVE-2025-1913 -- Prova di Concerto PoC Questo repository contiene una Prova di Concetto PoC solo a scopo educativo per CVE-2025-1913 , creata da Suhaib518 🇸🇦. Questa PoC dimostra come un input PHP serializzato appositamente creato possa attivare logiche vulnerabili in componenti WordPress...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

CVE-2025-50881

CVE-2025-50881: Esecuzione di Codice Remoto in API Use it Flow tramite moniteur.php Identificativo: CVE-2025-50881 Prodotto Affetto: API Use it Flow Versione 8.2.0 Rev 15851, Versione 9.2.0 Rev 18093 Editore: https://www.tenorsolutions.com precedentemente https://api-sas.fr/ Componentei Affettoi:...

CVE-2025-49113-Roundcube-RCE

CVE-2025-49113 — RCE Post-Autenticazione in Roundcube tramite Deserializzazione di Oggetti PHP Panoramica...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - Esecuzione di codice remoto RCE Exploit by kaal Exploit 1. HotelDruidExploit.py Questo Exploit crea una nuova stanza con il nostro payload PHP come nome della stanza. Utilizzo : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid ...

OWASP-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework Un aggiornamento leggermente maggiore perdonate il gioco di parole è in corso. Questo per introdurre cose come: Standard di codifica più semplice Supporto per PHP 8 Funzionalità più robuste Correzione delle segnalazioni di bug inviate. Questo strumento è rilasciato sott...

PHP-binary-bugs

Advisory di Exploits AI POP Builder Raccolta di advisory sui bug binari di PHP Confusione di tipo GMP non risolta in unserialize Idea: bypassare il wakeup ritardato e sfruttare il bug di confusione di tipo GMP non risolto in PHP = 5.6.40 Sorgente POC: GMPtypeconfPOC.php Advisory Analisi di...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 эксплойт Уязвимость обхода пути Path Traversal в функциональности загрузки файлов в tinyfilemanager.php в Tiny File Manager Project's Tiny File Manager = 2.4.6 позволяет удалённым злоумышленникам с действительными учётными записями пользователей загружать...

CVE-2026-55634

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...