KillaBoi/StealMyBitcoin-PoC
Can I trust it?
Be careful with this one.
Warnings Check
Very new: it was created yesterday. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence Careful
No licence: legally you can't reuse the code, unless the README says otherwise.
Quick checks from public data. They help, but they are no guarantee.
What it is
Single-file Python proof of concept that reproduces a multi-request exploit sequence against a PHP 8.4 CTF challenge, documented against a local Docker lab. Uses only the Python standard library.
Who it's for
Security researchers and CTF players studying PHP memory-corruption exploits
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up KillaBoi/StealMyBitcoin-PoC in my project. Follow its README: https://github.com/KillaBoi/StealMyBitcoin-PoC. Explain each step and check it is safe before running anything.
Star curve
On the radar
Its place among the radar's top 100, day by day, with #1 at the top. Gaps are days it was out of the top 100.
Records
- Best place on RepoAlerts: #7, on 26 Oct 2026
- On the Hacker News front page on 26 Oct 2026
On Hacker News
- Steal My Bitcoin CTF PoC115 points · 24 comments · 26 Oct 2026
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
20,847 GitHub repos watched and ranked every hour. Figures as of 26 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/KillaBoi/StealMyBitcoin-PoC?ref=badge)Similar repos
- cookiengineer/actual-php2shell
A proof-of-concept exploit demonstrating remote code execution against PHP 8.5.11 via two memory-corruption advisories, using an out-of-memory longjmp that leaves a hash table half-built. Includes a r
- ikow/php2shell-poc
Research toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618/109619) abusing session.upload_progress. Includes five chain descriptions, three exploit scripts, detection rules for Suricat
- dinosn/php-cve-2026-10961x-lab-poc
Lab reproduction and vulnerability-research package for PHP 8.5.11 CVE-2026-109618 and CVE-2026-109619, a remote code execution chain using memory disclosure via session cookies and a use-after-free.
- gichirimaku/wp2shell-PoC
Python proof-of-concept that checks WordPress core sites for the wp2shell chain (CVE-2026-63030 and CVE-2026-60137), a pre-authentication route confusion in the REST batch endpoint combined with a WP_
- ACD421/PHP
Collection of security research on unpatched PHP vulnerabilities, including use-after-free and deserialization flaws, with proof-of-concept exploit scripts, raw test receipts and a payload generator.
- eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version