Build software better, together

aarsaputra / php2shell

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

shell php security exploit penetration-testing poc rce cve vulnerability-research shell-backdoor rce-scanner php2shell php2shell-cve php2shell-vulnerability php2shell-cve-2026

Updated Oct 26, 2026
Python

kjry8sb / php2shell-wordpress-rce-fullchain

Star

Pre-auth RCE against WordPress (7.1.2/7.1.3) via PHP2Shell CVE-2026-109618 / CVE-2026-109619

php-rce wordpress-rce cve-2026-109618 cve-2026-109619 php2shell php2shell-cve

Updated Oct 26, 2026
Python

Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.

php-security security-scanner vulnerability-research defensive-security vulnerability-researcher cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026 cve-2026-115560

Updated Oct 24, 2026
Python

testerxma / php2shell

Star

Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.

Updated Oct 25, 2026
Python

php2-shell / php2shell-POC-CVE-2026-109618-CVE-2026-109619

Star

php2shell CVE-2026-109618 CVE-2026-109619 tracks php2shell, cve php2shell and php2shell cve. php2shell vulnerability plus php cve 2026 (cve php 2026), php cve patch: 8.5.12, 8.4.27, 8.3.36, 8.2.35. php cve rce, php security.

Updated Oct 23, 2026
C++

sajjadh47 / php2shell-php

Star

Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.

Updated Oct 24, 2026
PHP

gagaltotal / CVE-2026-109618-109619-php2shell

Star

CVE-2026-109618-109619 PHP2shell

python php php7 php-framework python-script python3 php5 python-3 cve php8 php74 cves cve-2026-109618 cve-2026-109619 php2shell php2shell-cve php2shell-cve-2026

Updated Oct 26, 2026
Python

beardedeagle / php2shell-patch-audit

Star

Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.

python windows macos linux docker ssh php security-audit vulnerability-scanner patch-verification php2shell php2shell-scanner php2shell-cve php2shell-cve-2026 vendor-backports

Updated Oct 23, 2026
Python

yatuk / php2shell-session-gap-lab

Star

Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control

php php2shell php2shell-scanner php2shell-fix php2shell-cve php2shell-vulnerability

Updated Oct 24, 2026
Python

hoed / php2shell

Star

PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619

php2shell php2shell-cve php2shell-vulnerability php2shell-cve-2026

Updated Oct 24, 2026
Python

PrivacySafe / security-patches

Star

Security mitigations and auditing tools shared for the public good. 💞

security security-audit security-tools php2shell php2shell-scanner php2shell-fix php2shell-cve php2shell-vulnerability php2shell-cve-2026

Updated Oct 25, 2026
Shell

yunuscobas / php-inventory-scanner

Star

PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.

phpinfo network-scanner blue-team phpinfo-scanner cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-fix php2shell-cve php2shell-vulnerability php2shell-cve-2026 php2shell-kr php2shell-check

Updated Oct 26, 2026
Python

avego / php2shell

Star

Патчи безопасности и сканер аудита для FastPanel и Debian PHP против уязвимостей CVE-2026-109618 и CVE-2026-109619 (PHP 5.2–8.1). Пошаговые руководства по сборке.