php2shell-lab

php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...

php2shell-lab

PHP2Shell Lab A local Docker laboratory for comparing PHP 8.5...

php2shell-lab

php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...

Exploit for CVE-2026-109618

php2shell-lab A reproducible, offline lab for safely anal...