Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.
-
Updated
Oct 23, 2026 - Go
#
php2shell-scanner
Here are 26 public repositories matching this topic...
PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.
-
Updated
Oct 23, 2026 - Python
A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.
-
Updated
Oct 25, 2026 - Go
Safely verify the October 2026 PHP OOM security fixes by testing patched runtime behaviour
linux bash php security php-security cve security-checker devsecops vulnerability-check cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner
-
Updated
Oct 21, 2026 - Shell
Scan Dockerfiles and YAML manifests for PHP image tags affected by PHP2Shell advisories
docker php yaml dockerfile php-security devsecops vulnerability-scanner container-security supply-chain-security php2shell php2shell-scanner
-
Updated
Oct 24, 2026 - PHP
Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.
php-security security-scanner vulnerability-research defensive-security vulnerability-researcher cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026 cve-2026-115560
-
Updated
Oct 24, 2026 - Python
Guided one-file PHP wizard for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Checks if your PHP is patched, applies php.net’s temporary mitigations with backup & undo. Run: curl -fsSL wasdthedebugger.github.io/php2shell/fix | php
-
Updated
Oct 23, 2026 - PHP
Read-only PHP discovery and patch-review scanner for Windows, Linux, and macOS. Produces HTML+CSV reports for CVE-2026-109618/109619 assessment — never claims a host is clean or that the active HTTP runtime is verified.
windows linux golang php csv incident-response dfir html-report vulnerability-scanner security-assessment apache-2-0 php2shell php2shell-scanner
-
Updated
Oct 25, 2026 - Go
Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.
cli php security php-library php-fpm penetration-testing cve vulnerability-detection cve-scanning security-scanner security-tools vulnerability-scanner security-testing cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026
-
Updated
Oct 24, 2026 - PHP
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
python security-audit php-security security-tools vulnerability-scanner cybersecuirity cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner
-
Updated
Oct 22, 2026 - Python
Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.
reverse-shell web-shell cloudflare exploitation automated-testing red-team aslr critical aslr-bypass waf-bypass cves exploitation-tool exploitation-and-pentesting cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026
-
Updated
Oct 25, 2026 - Python
Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control
-
Updated
Oct 24, 2026 - Python
Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.
python windows macos linux docker ssh php security-audit vulnerability-scanner patch-verification php2shell php2shell-scanner php2shell-cve php2shell-cve-2026 vendor-backports
-
Updated
Oct 23, 2026 - Python
Script capaz de detectar e te auxiliar a corrigir a vulnerabilidade php2shell
-
Updated
Oct 26, 2026 - Shell
php2shell is the name given to a class of memory-exhaustion vulnerabilities affecting several unpatched PHP branches.
-
Updated
Oct 23, 2026 - Python
-
Updated
Oct 23, 2026 - PowerShell
This tool is designed for authorized security research and educational purposes only. Do not use against systems you do not own or do not have explicit written permission to test. The author assumes no liability for misuse or damage caused by this tool.
-
Updated
Oct 23, 2026 - Python
Check if your server is vulnerable for latest PHP2Shell (CVE-2026-109618,CVE-2026-109619, CVE-2026-115560)
-
Updated
Oct 24, 2026 - Shell
Add this topic to your repo
To associate your repository with the php2shell-scanner topic, visit your repo's landing page and select "manage topics."