php2shell-scanner

Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.

A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.

PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.

Safely verify the October 2026 PHP OOM security fixes by testing patched runtime behaviour

Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.

Scan Dockerfiles and YAML manifests for PHP image tags affected by PHP2Shell advisories

Detection and offset tooling for PHP2Shell

A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)

Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.

Public web interface for detecting the php2shell vulnerability

Read-only PHP discovery and patch-review scanner for Windows, Linux, and macOS. Produces HTML+CSV reports for CVE-2026-109618/109619 assessment — never claims a host is clean or that the active HTTP runtime is verified.

Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.

Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.

Guided one-file PHP wizard for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Checks if your PHP is patched, applies php.net’s temporary mitigations with backup & undo. Run: curl -fsSL wasdthedebugger.github.io/php2shell/fix | php

Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control

Security mitigations and auditing tools shared for the public good. 💞

Script capaz de detectar e te auxiliar a corrigir a vulnerabilidade php2shell

php2shell is the name given to a class of memory-exhaustion vulnerabilities affecting several unpatched PHP branches.

PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.