ambionics

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

Exploit for CVE-2021-3129

Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

Exploits targeting Symfony

Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.

Exploits for Magento 2.3.0 and lower

lightyear is a tool to dump files in tedious (blind) conditions using PHP filters

Exploits targeting vBulletin.

Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)