9bie/php2shell-bypass-aslr-exp

Get alerts like this View on GitHub Share on X

Can I trust it?

Be careful with this one.

Warnings Check
Very new: it was created yesterday. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence Careful
No licence: legally you can't reuse the code, unless the README says otherwise.

Quick checks from public data. They help, but they are no guarantee.

What it is

A proof-of-concept exploit for a PHP 8.4.26 session-handling vulnerability under Apache mod_php. It uses plain HTTP multipart requests against a page without session_start() to leak heap and libphp addresses and reach command execution, targeting the official php:8.4.26-apache…

Who it's for

Security researchers and penetration testers reproducing PHP 8.4 memory-corruption issues in lab environments

How to use it

Install

docker compose -f docker/docker-compose.yml up -d

From its README. Check it there before running it.

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up 9bie/php2shell-bypass-aslr-exp in my project. Follow its README: https://github.com/9bie/php2shell-bypass-aslr-exp. Explain each step and check it is safe before running anything.

Star curve

802From 395 to 802 stars between 21 Oct 2026 and 22 Oct 2026.

On the radar

Best place #6, on 22 Oct 2026. In the top 100 on 1 of the last 5 days.

Its place among the radar's top 100, day by day, with #1 at the top. Gaps are days it was out of the top 100.

Records

Best place on RepoAlerts: #6, on 22 Oct 2026

Get alerts for repos like this

We'll email you when repos like this start rising. Free, once a week, only what matches.

18,965 GitHub repos watched and ranked every hour. Figures as of 22 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![9bie/php2shell-bypass-aslr-exp on RepoAlerts](https://repoalerts.com/badge/9bie/php2shell-bypass-aslr-exp.svg)](https://repoalerts.com/repo/9bie/php2shell-bypass-aslr-exp?ref=badge)

Share on X

syrex1013/php2shell
Proof-of-concept exploit and lab for CVE-2026-109618 and CVE-2026-109619, a heap use-after-free in PHP's session.upload_progress handling. Includes a Docker lab reproducing the stale-pointer write on
Python · 77 stars · +77 this week · 1 day old
eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version
Shell · 778 stars · +778 this week · 1 day old
syhunt/php2shell-protection
Test kit and Apache .htaccess rules that reject multipart/form-data POST requests while allowing URL-encoded POSTs, with request-size limits and hardening measures against php2shell (CVE-2026-109618,
Web & UIPHP · 67 stars · +67 this week · 1 day old
ikow/php2shell-poc
Research toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618/109619) abusing session.upload_progress. Includes five chain descriptions, three exploit scripts, detection rules for Suricat
Python · 1,333 stars · +1,333 this week · 1 day old
openai/php2shell-checker
A checker that tells whether a website's PHP version, read from HTTP response headers, or a local PHP binary, read via php -v, is vulnerable to php2shell. Results are OK, VULNERABLE or UNKNOWN, with a
CLI toolJavaScript · 659 stars · +659 this week · 1 day old
JoasASantos/php2shell-scanner
Python scanner that checks targets for PHP core RCE CVE-2026-109618 and CVE-2026-109619 without exploiting them. It enumerates subdomains via crt.sh and subfinder, grabs HTTP banners, and infers vulne
CLI toolPython · 82 stars · +82 this week · 1 day old