RepoAlerts
SponsorGet alerts

aarsaputra/php2shell

Get alerts like thisView on GitHubShare on X

Can I trust it?

Be careful with this one.

  • Warnings Check

    Very new: it was created 2 days ago. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change yesterday.

  • Licence Careful

    No licence: legally you can't reuse the code, unless the README says otherwise.

Quick checks from public data. They help, but they are no guarantee.

What it is

A research toolkit that reproduces CVE-2026-109619, an unauthenticated remote code execution chain in PHP 5.4 to 8.4.26 over plain HTTP against mod_php with Apache prefork. Commands are limited to short identity commands, and the tool is designed to prove access rather than…

Who it's for

Security researchers and penetration testers assessing PHP servers for CVE-2026-109619 in authorized lab or test environments

How to use it

Install

bash install.sh

From its README. Check it there before running it.

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up aarsaputra/php2shell in my project. Follow its README: https://github.com/aarsaputra/php2shell. Explain each step and check it is safe before running anything.

Star curve

73From 0 to 73 stars between 23 Oct 2026 and 25 Oct 2026.

Get alerts for repos like this

We'll email you when repos like this start rising. Free, once a week, only what matches.

20,156 GitHub repos watched and ranked every hour. Figures as of 25 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![aarsaputra/php2shell on RepoAlerts](https://repoalerts.com/badge/aarsaputra/php2shell.svg)](https://repoalerts.com/repo/aarsaputra/php2shell?ref=badge)
Share on X
  • aancw/php2shell-scanner

    Scanner that detects exposure to the PHP core RCEs CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). It runs a blackbox HTTP check against web targets, host checks on the local machine, or host checks

    CLI toolWeb & UIGo · 88 stars · +88 this week · 3 days old

  • devploit/php2shell

    Research toolkit for the PHP session.upload_progress pre-auth RCE chain (CVE-2026-109618 / CVE-2026-109619) in mod_php. Provides a version-aware dispatcher, per-build profiles, Docker laboratories, he

    Python · 158 stars · +158 this week · 4 days old

  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 1,002 stars · +1,002 this week · 4 days old

  • pentestershell/php2shellbt

    Standalone pure-stdlib Python scanner that runs read-only probes to detect the php2shell chain in PHP applications, covering CVE-2026-109618, CVE-2026-109619, a session handler mismatch and an LFI ses

    CLI toolPython · 72 stars · +72 this week · 4 days old

  • ikow/php2shell-poc

    Research toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618/109619) abusing session.upload_progress. Includes five chain descriptions, three exploit scripts, detection rules for Suricat

    Python · 1,784 stars · +1,784 this week · 4 days old

  • cookiengineer/actual-php2shell

    A proof-of-concept exploit demonstrating remote code execution against PHP 8.5.11 via two memory-corruption advisories, using an out-of-memory longjmp that leaves a hash table half-built. Includes a r

    HTML · 78 stars · +78 this week · 3 days old