ACD421/PHP
Resource
Can I trust it?
Be careful with this one.
Warnings Check
Very new: it was created 2 days ago. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change yesterday.
Licence Careful
No licence: legally you can't reuse the code, unless the README says otherwise.
Quick checks from public data. They help, but they are no guarantee.
What it is
Collection of security research on unpatched PHP vulnerabilities, including use-after-free and deserialization flaws, with proof-of-concept exploit scripts, raw test receipts and a payload generator. Documents remote code execution, denial of service and a local privilege issue…
Who it's for
Security researchers, PHP maintainers and defenders assessing PHP deserialization and session handling exposure
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up ACD421/PHP in my project. Follow its README: https://github.com/ACD421/PHP. Explain each step and check it is safe before running anything.
Star curve
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
20,245 GitHub repos watched and ranked every hour. Figures as of 26 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/ACD421/PHP?ref=badge)Similar repos
- 78ResearchLab/PHP2Shell-Full-Chain-Exploit
Documents the PHP session.upload_progress use-after-free issue that can lead to remote code execution (CVE-2026-109618, CVE-2026-109619). Covers affected and fixed PHP versions, Snort and Suricata det
- aarsaputra/php2shell
A research toolkit that reproduces CVE-2026-109619, an unauthenticated remote code execution chain in PHP 5.4 to 8.4.26 over plain HTTP against mod_php with Apache prefork. Commands are limited to sho
- ikow/php2shell-poc
Research toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618/109619) abusing session.upload_progress. Includes five chain descriptions, three exploit scripts, detection rules for Suricat
- JoasASantos/php2shell-exploit
Python exploit framework for CVE-2026-109618 and CVE-2026-109619, a use-after-free in PHP's session.upload_progress handler that is described as enabling pre-auth remote code execution over HTTP. Incl
- NCSC-NL/php2shell
Operational information on two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, including affected contexts, fixed PHP versions, temporary mitigations and links
- dinosn/php-cve-2026-10961x-lab-poc
Lab reproduction and vulnerability-research package for PHP 8.5.11 CVE-2026-109618 and CVE-2026-109619, a remote code execution chain using memory disclosure via session cookies and a use-after-free.