PHP2Shell (CVE-2026-109618/109619) security research and PoC validation using OrcaCyber Zero & Ultra. Includes technical analysis, RCE evidence, and defensive verification tools.
-
Updated
Oct 23, 2026 - Python
#
php2shell-scanner
Here are 15 public repositories matching this topic...
Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.
php-security security-scanner vulnerability-research defensive-security vulnerability-researcher cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026 cve-2026-115560
-
Updated
Oct 24, 2026 - Python
A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)
php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026 php2shell-check
-
Updated
Oct 28, 2026 - Python
Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.
reverse-shell web-shell cloudflare exploitation automated-testing red-team aslr critical aslr-bypass waf-bypass cves exploitation-tool exploitation-and-pentesting cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-cve php2shell-vulnerability php2shell-cve-2026
-
Updated
Oct 25, 2026 - Python
Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.
python windows macos linux docker ssh php security-audit vulnerability-scanner patch-verification php2shell php2shell-scanner php2shell-cve php2shell-cve-2026 vendor-backports
-
Updated
Oct 23, 2026 - Python
Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control
-
Updated
Oct 24, 2026 - Python
php2shell is the name given to a class of memory-exhaustion vulnerabilities affecting several unpatched PHP branches.
-
Updated
Oct 23, 2026 - Python
A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.
python security-audit php-security security-tools vulnerability-scanner cybersecuirity cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner
-
Updated
Oct 22, 2026 - Python
This tool is designed for authorized security research and educational purposes only. Do not use against systems you do not own or do not have explicit written permission to test. The author assumes no liability for misuse or damage caused by this tool.
-
Updated
Oct 23, 2026 - Python
PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.
phpinfo network-scanner blue-team phpinfo-scanner cve-2026-109618 cve-2026-109619 php2shell php2shell-scanner php2shell-fix php2shell-cve php2shell-vulnerability php2shell-cve-2026 php2shell-kr php2shell-check
-
Updated
Oct 26, 2026 - Python
CVE-2026-109618 · CVE-2026-109619
-
Updated
Oct 27, 2026 - Python
Read-only scanner and config patcher to detect and work around CVE-2026-109618 / CVE-2026-109619 on PHP, with a full detection and harening manual.
-
Updated
Oct 26, 2026 - Python
Hands-on PHP2Shell workshop: Docker labs, guided debugging, and annotated exploits for CVE-2026-109618 and CVE-2026-109619.
-
Updated
Oct 30, 2026 - Python
All-in-one tool to detect 2Shell series vulnerabilities
python security log4j rce cve appsec vulnerability-detection security-scanner security-tools vulnerability-scanner remote-code-execution log4shell spring4shell text4shell php2shell php2shell-scanner node2shell node2shell-scanner http2shell 2shell
-
Updated
Oct 26, 2026 - Python
Add this topic to your repo
To associate your repository with the php2shell-scanner topic, visit your repo's landing page and select "manage topics."