RepoAlerts
SponsorGet alerts

BastionPHP/Bastion

CLI tool

Get alerts like thisView on GitHubWebsiteShare on X

Can I trust it?

Worth a closer look before you use it.

  • Warnings Check

    Very new: it was created 2 days ago. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change 2 days ago.

  • Licence OK

    MIT: you can use it for free, also in a commercial product. Keep the licence notice.

Quick checks from public data. They help, but they are no guarantee.

What it is

Assesses PHP installations for patch state using upstream versions, package metadata, vendor fix data and running-process evidence, and scans web roots and logs for intrusion indicators. Results are reported as fixed, vulnerable, likely-vulnerable or unknown with supporting…

Who it's for

Operators and incident responders checking PHP hosts for PHP2Shell exposure and signs of intrusion

How to use it

Install

git clone https://github.com/BastionPHP/Bastion.git

From its README. Check it there before running it.

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up BastionPHP/Bastion in my project. Follow its README: https://github.com/BastionPHP/Bastion. Explain each step and check it is safe before running anything.

Star curve

57From 57 to 57 stars between 22 Oct 2026 and 23 Oct 2026.

Get alerts for repos like this

We'll email you when something in Dev infrastructure starts rising. Free, once a week, only what matches.

19,797 GitHub repos watched and ranked every hour. Figures as of 24 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![BastionPHP/Bastion on RepoAlerts](https://repoalerts.com/badge/BastionPHP/Bastion.svg)](https://repoalerts.com/repo/BastionPHP/Bastion?ref=badge)
Share on X
  • openai/php2shell-checker

    A checker that tells whether a website's PHP version, read from HTTP response headers, or a local PHP binary, read via php -v, is vulnerable to php2shell. Results are OK, VULNERABLE or UNKNOWN, with a

    CLI toolJavaScript · 1,364 stars · +1,364 this week · 4 days old

  • Anton-Barinov/php2shell-patches

    Patch files that backport fixes for CVE-2026-109618 and CVE-2026-109619 (php2shell) to end-of-life PHP 5.6, 7.x, 8.0 and 8.1, which receive no official fix. Offers a minimal official-style variant tha

    Dev infrastructureShell · 102 stars · +102 this week · 3 days old

  • aancw/php2shell-scanner

    Scanner that detects exposure to the PHP core RCEs CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). It runs a blackbox HTTP check against web targets, host checks on the local machine, or host checks

    CLI toolWeb & UIGo · 52 stars · +52 this week · 2 days old

  • devploit/php2shell

    Research toolkit for the PHP session.upload_progress pre-auth RCE chain (CVE-2026-109618 / CVE-2026-109619) in mod_php. Provides a version-aware dispatcher, per-build profiles, Docker laboratories, he

    Python · 149 stars · +149 this week · 3 days old

  • 78ResearchLab/PHP2Shell-Full-Chain-Exploit

    Documents the PHP session.upload_progress use-after-free issue that can lead to remote code execution (CVE-2026-109618, CVE-2026-109619). Covers affected and fixed PHP versions, Snort and Suricata det

    Python · 76 stars · +76 this week · 2 days old

  • pentestershell/php2shellbt

    Standalone pure-stdlib Python scanner that runs read-only probes to detect the php2shell chain in PHP applications, covering CVE-2026-109618, CVE-2026-109619, a session handler mismatch and an LFI ses

    CLI toolPython · 67 stars · +67 this week · 3 days old