177 matches found
PHP2P4IM0NSHELL
🐘 PHP2P4IM0NSHELL v1.2 🧩 Extensión de navegador Manifest V3...
php2shell-checker
PHP Version Checker Check a website or local PHP binary to see if it's vulnerable to php2shell. To install both skills, ask Codex: $skill-installer install both skills from https://github.com/openai/php2shell-checker Use phpcheck-server when you have server access, or phpcheck-url when you only...
php2shell-checker
PHP2Shell Checker A read-only PHP package audit for Debian 12 bookworm and Debian 13 trixie. Checks package versions against the published fixes for CVE-2026-109618 and CVE-2026-109619 , commonly called PHP2Shell. It inventories PHP core packages across installed branches, including PHP-FPM, CLI,...
php-cve-2026-10961x-lab-poc
php2shell lab — PHP CVE-2026-109618 / CVE-2026-109619 Lab reproduction and vulnerability-research package for the PHP 8.5.11 php2shell class CVE-2026-109618, CVE-2026-109619, October 2026. Status: Proven — self-contained RCE four plain HTTP requests, no debugger, no local access, plus...
php2shell-scanner
php2shell-scanner Non-destructive scanner with opt-in probe for CVE-2026-109618 RCE via OOM corruption and CVE-2026-109619 RCE via stale global state — core PHP bugs fixed in 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12. ✅ Verified against the official php-src advisories 2026-10-21, Critical. The CVE IDs an...
ShellSCope
SHELLSCOPE / || | | | | | | | / | / || | | \ | || | | | | | | \ | | | | | | | | || | | | | | | | | |/|| ||||||/ ||| \| 2shell exposure auditor — find your own before they find you. shellscope checks an authorized network for two 2026 CVE clusters: Plex2Shell — CVE-2026-96652 / -96654 / -96655...
php2shell-eol-backport
php2shell-eol-backport Unofficial fix for CVE-2026-109618 and CVE-2026-109619 "php2shell" for the end-of-life PHP packages of Enterprise Linux 6 and 7 : php-5.3.3 RHEL / CentOS / Oracle Linux 6 and php-5.4.16 RHEL / CentOS / Oracle Linux / Scientific Linux 7. PHP fixed both vulnerabilities on 21...
php2shell-lab
php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...
checkmk_php2shell
checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...
php2shell-scanner
php2shell-scanner A command-line tool for detecting CVE-2026-109618 and CVE-2026-109619 in PHP applications. How It Works The scanner sends a minimal multipart control request followed by up to three crafted multipart probes. The probes use PHP array keys nested 62 levels deep and increase from 1...
honeypot-data
Honeypot Datasets & Reports Public datasets and observation reports collected from Internet-facing honeypots. Available Datasets 2025-07-31 → 2025-11-01 — Finch Reverse Proxy: See the dataset card for details source IPs are pseudonymized. 2026-10-24 — PHP2Shell confirmed-RCE evidence: 35 case...
php2shell-lab
php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...
php2shell-check
php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...
php-5.4-cve-2026-php2shell-patch
php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...
php2shell-check
php2shell-check Passive triage for websites that advertise a PHP version affected by PHP2Shell CVE-2026-109618 · CVE-2026-109619 · single-file, dependency-free Overview php2shell-check reads the PHP version a website already advertises in its public response headers and compares it with the...
php2shell-detect
php2shell Detection Zeek detections and Suricata rules for HTTP indicators associated with "php2shell" CVE-2026-109618 / CVE-2026-109619, potential RCE in PHP longjmp memory handling. Findings identify suspicious traffic or potentially affected software. Corelight blog: PHP2Shell detection before...
php2shell-exposurehunt
php2shell-exposurehunt Defender XDR exposure hunting for PHP2Shell CVE-2026-109618 / CVE-2026-109619. v3.4 · 23 Oct 2026 Purpose: Find onboarded devices actively running PHP that could be exposed to PHP2Shell. Scope: Defender XDR Advanced Hunting · onboarded Windows and Linux endpoints · 30-day...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-finder A non-destructive, probabilistic finder for...