> cat /dev/github | grep security-tools
discovered 03 Aug 2026

non-alphanumeric-webshell

PHP ★ 21 via github-topic
→ View on GitHub
The Non-Alphanumeric WebShell in PHP is a tool designed to execute code on a server by exploiting certain user input vulnerabilities, particularly targeting web application firewalls (WAFs) that filter common characters. Its notable feature is the ability to construct a functioning shell without relying on blocked alphanumeric characters, using techniques such as XOR operations and leveraging PHP's handling of arrays and string conversions. This tool serves as a proof of concept for code execution bypass methods in security testing scenarios.