RepoAlerts
SponsorGet alerts

aancw/php2shell-scanner

CLI tool

Get alerts like thisView on GitHubShare on X

Can I trust it?

Worth a closer look before you use it.

  • Warnings Check

    Very new: it was created yesterday. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change today.

  • Licence OK

    MIT: you can use it for free, also in a commercial product. Keep the licence notice.

Quick checks from public data. They help, but they are no guarantee.

What it is

Scanner that detects exposure to the PHP core RCEs CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). It runs a blackbox HTTP check against web targets, host checks on the local machine, or host checks on remote hosts over SSH. It checks the PHP version against fixed releases and…

Who it's for

Sysadmins and security teams auditing PHP servers for PHP2Shell exposure

How to use it

Install

curl -fsSLO https://github.com/aancw/php2shell-scanner/releases/latest/download/php2shell-scanner-linux-amd64.tar.gz

From its README. Check it there before running it.

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up aancw/php2shell-scanner in my project. Follow its README: https://github.com/aancw/php2shell-scanner. Explain each step and check it is safe before running anything.

Star curve

36From 0 to 36 stars between 22 Oct 2026 and 23 Oct 2026.

Get alerts for repos like this

We'll email you when something in Web & UI starts rising. Free, once a week, only what matches.

19,302 GitHub repos watched and ranked every hour. Figures as of 23 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![aancw/php2shell-scanner on RepoAlerts](https://repoalerts.com/badge/aancw/php2shell-scanner.svg)](https://repoalerts.com/repo/aancw/php2shell-scanner?ref=badge)
Share on X
  • assetnote/php2shell-scanner

    Command-line scanner that detects CVE-2026-109618 and CVE-2026-109619 in PHP applications by sending crafted multipart probes and checking the responses for memory-exhaustion, PHP-FPM worker failure,

    CLI toolPython · 333 stars · +333 this week · 1 day old

  • JoasASantos/php2shell-scanner

    Python scanner that checks targets for PHP core RCE CVE-2026-109618 and CVE-2026-109619 without exploiting them. It enumerates subdomains via crt.sh and subfinder, grabs HTTP banners, and infers vulne

    CLI toolPython · 97 stars · +97 this week · 2 days old

  • pentestershell/php2shellbt

    Standalone pure-stdlib Python scanner that runs read-only probes to detect the php2shell chain in PHP applications, covering CVE-2026-109618, CVE-2026-109619, a session handler mismatch and an LFI ses

    CLI toolPython · 56 stars · +56 this week · 2 days old

  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 904 stars · +904 this week · 2 days old

  • openai/php2shell-checker

    A checker that tells whether a website's PHP version, read from HTTP response headers, or a local PHP binary, read via php -v, is vulnerable to php2shell. Results are OK, VULNERABLE or UNKNOWN, with a

    CLI toolJavaScript · 846 stars · +846 this week · 2 days old

  • NCSC-NL/php2shell

    Operational information on two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, including affected contexts, fixed PHP versions, temporary mitigations and links

    ResourcePython · 236 stars · +236 this week · 2 days old