php2shell-scanner

Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.

PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.

Detection and offset tooling for PHP2Shell

Safely verify the October 2026 PHP OOM security fixes by testing patched runtime behaviour

Scan Dockerfiles and YAML manifests for PHP image tags affected by PHP2Shell advisories

Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.

Guided one-file PHP wizard for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Checks if your PHP is patched, applies php.net’s temporary mitigations with backup & undo. Run: curl -fsSL wasdthedebugger.github.io/php2shell/fix | php

Public web interface for detecting the php2shell vulnerability

A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.

Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control

Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.

php2shell is the name given to a class of memory-exhaustion vulnerabilities affecting several unpatched PHP branches.

Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.

Check if your server is vulnerable for latest PHP2Shell (CVE-2026-109618,CVE-2026-109619, CVE-2026-115560)

This tool is designed for authorized security research and educational purposes only. Do not use against systems you do not own or do not have explicit written permission to test. The author assumes no liability for misuse or damage caused by this tool.

🚨 Emergency toolkit for PHP2Shell (CVE-2026-109618 & CVE-2026-109619) CVSS 9.2 - Unauthenticated RCE in PHP Core. Scanner + Temporary Mitigation + Permanent Fix Guide. Fixed: 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12

PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers

Published indicators and a log-hunting guide for the PHP2Shell PHP flaws (CVE-2026-109618, CVE-2026-109619)

Check websites and servers for PHP2Shell (CVE-2026-109618, CVE-2026-109619), verify the fix is running, and hunt for compromise.