Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.
-
Updated
Oct 26, 2026 - Python
#
http2shell
Here are 4 public repositories matching this topic...
Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell / Node2Shell / HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.
nodejs python bash kubernetes dotnet incident-response brotli yara security-scanner yara-rules sarif devsecops vulnerability-scanner container-security cve-2026-111497 node2shell http2shell broccoli2shell
-
Updated
Oct 27, 2026 - Shell
All-in-one tool to detect 2Shell series vulnerabilities
python security log4j rce cve appsec vulnerability-detection security-scanner security-tools vulnerability-scanner remote-code-execution log4shell spring4shell text4shell php2shell php2shell-scanner node2shell node2shell-scanner http2shell 2shell
-
Updated
Oct 26, 2026 - Python
Check Node.js, Bun, Python Brotli and libbrotli for HTTP2Shell / Node2Shell (CVE-2026-111497): fixed versions and a read-only version check script.
-
Updated
Oct 25, 2026 - Shell
Add this topic to your repo
To associate your repository with the http2shell topic, visit your repo's landing page and select "manage topics."