devploit/php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
GitHub repository with 269 stars and 73 forks.
Language: Python
Topics: apache, bug-bounty, cve, cve-2026-109618, cve-2026-109619, exploit, exploit-development, heap-exploitation, mod-php, penetration-testing