EthanArbuckle / fairplay-decrypt
Offline FairPlay App Store IPA decryption with independent key derivation
EthanArbuckle / fairplay-decrypt
ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
AhmadHassan-BTed / ShopifyAutoAuth
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
9bie / php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
openai / php2shell-checker
Checks a website's PHP version headers or a local PHP install against upstream fixed releases for PHP2Shell.
YuKongA / ghostlock-app
GhostLock One-Tap Execution App (CVE-2026-43499)
dhicoc / dsh-reverse-skill
Complete reverse-skill (88 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.