
php-bypass-disable-functions
Demo project how to bypass the disable_functions security control of PHP on Linux

Demo project how to bypass the disable_functions security control of PHP on Linux

PHP proof-of-concept exploit for CVE-2023-2640 and CVE-2023-32629 privilege escalation vulnerabilities on Ubuntu systems. Intended for educational…

Polkit CVE-2021-4034 exploitation in High-Level Programming Language

Miscellaneous exploit code

PoC exploit for CVE-2026-17543: SQL injection in PHP ext/pgsql via backslash breakout, with data exfiltration and admin privilege-escalation payloads…

Local privilege escalation exploit for CVE-2019-0211 targeting Apache HTTP Server 2.4.17-2.4.38 with mod_php. Uses UAF in PHP to corrupt Apache…

PHP poc, exploit for CVE-2025-9074

Intentionally vulnerable PHP app with Nginx/PHP-FPM setup for reproducing CVE-2019-11043, including Docker and Kubernetes deployment,…

MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…

Proof-of-concept for a blind XSS vulnerability in Maid Hiring Management System v1.0, capturing admin session cookies via a crafted application form…

A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS,…