Blue-team PHP2Shell exposure triage: certificate-transparency subdomain discovery and disclosed PHP version checks.
Scan local PHP, Docker images, running containers, URLs and inventories for PHP2Shell exposure (CVE-2026-109618 / CVE-2026-109619). Zero-dependency Node CLI with terminal UI, HTML dashboard and GitHub Action. Read-only, no exploit code.
Plugin de Claude Code para detectar si un sitio o servidor usa una versión de PHP vulnerable a PHP2Shell (parches de octubre 2026), sin enviar exploits.
Passive check for Claude whether a website or server runs a PHP version affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619)
HadayaLab Digital Pandemic Fortress — Signed CycloneDX 1.6 SBOM Attestations, Reproducible Lockfile Fixtures & Zero-Exfiltration AST Advisories (PHP2Shell, Node2Shell, React2Shell, EOL PHP, Docker & MCP Skill Poisoning)
Chrome extension for Blue Teams: passively identify a site's PHP version and PHP2Shell (CVE-2026-109618/109619) exposure.
Check PHP2Shell (CVE-2026-109618, CVE-2026-109619) from inside your server: distribution backports, missed restarts and interim mitigations, verdicts computed in the browser.
Stopgap for PHP2Shell (CVE-2026-109618/109619): Go reverse proxy in front of PHP, a patch/mitigation checker, and a Claude Code response skill
Browser extension that warns when a site's server reports a PHP version vulnerable to PHP2Shell (CVE-2026-109618/109619). Reads headers only, never probes.
To associate your repository with the php2shell topic, visit your repo's landing page and select "manage topics."