exploit

php2shell-poc

+144

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

SideInstaller

+77

An an app that installs Sidestore on iOS 27, fully on-device

awesome-hacker-search-engines

+62

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

h4cker

+75

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

xmir-patcher

+49

Firmware patcher for Xiaomi routers

Relapse-Exploit

+103

Exploit chain for PS5 7.00 - 13.60

php2shell

+30

PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.

PoC-in-GitHub

+21

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

pocindex

+20

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.