RepoAlerts
SponsorGet alerts

the-cookie-bakery/actual-php2shell

Get alerts like thisView on GitHubShare on X

Can I trust it?

Be careful with this one.

  • Warnings Check

    Very new: it was created 13 days ago. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change 12 days ago.

  • Licence Careful

    No licence: legally you can't reuse the code, unless the README says otherwise.

Quick checks from public data. They help, but they are no guarantee.

What it is

A proof-of-concept exploit demonstrating remote code execution against PHP 8.5.11 via two memory-corruption advisories, using an out-of-memory longjmp that leaves a hash table half-built. Includes a reproducible Podman setup and a Python script that reads /etc/passwd without…

Who it's for

Security researchers and PHP maintainers analyzing CVE-2026-109618 and CVE-2026-109619

How to use it

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up the-cookie-bakery/actual-php2shell in my project. Follow its README: https://github.com/the-cookie-bakery/actual-php2shell. Explain each step and check it is safe before running anything.

Read the README

Star curve

81From 37 to 81 stars between 22 Oct 2026 and 2 Nov 2026.

Get alerts for repos like this

We'll email you when repos like this start rising. Free, once a week, only what matches.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![the-cookie-bakery/actual-php2shell on RepoAlerts](https://repoalerts.com/badge/the-cookie-bakery/actual-php2shell.svg)](https://repoalerts.com/repo/the-cookie-bakery/actual-php2shell?ref=badge)
Share on X
  • aarsaputra/php2shell

    A research toolkit that reproduces CVE-2026-109619, an unauthenticated remote code execution chain in PHP 5.4 to 8.4.26 over plain HTTP against mod_php with Apache prefork. Commands are limited to sho

    Python · 123 stars · +23 this week · 12 days old

  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 1,060 stars · +29 this week · 14 days old

  • syrex1013/php2shell

    Proof-of-concept exploit and lab for CVE-2026-109618 and CVE-2026-109619, a heap use-after-free in PHP's session.upload_progress handling. Includes a Docker lab reproducing the stale-pointer write on

    Python · 152 stars · +5 this week · 14 days old

  • openai/php2shell-checker

    A checker that tells whether a website's PHP version, read from HTTP response headers, or a local PHP binary, read via php -v, is vulnerable to php2shell. Results are OK, VULNERABLE or UNKNOWN, with a

    CLI toolJavaScript · 1,460 stars · +20 this week · 14 days old

  • 9bie/php2shell-bypass-aslr-exp

    A proof-of-concept exploit for a PHP 8.4.26 session-handling vulnerability under Apache mod_php. It uses plain HTTP multipart requests against a page without session_start() to leak heap and libphp ad

    Python · 1,551 stars · +50 this week · 14 days old

  • pentestershell/php2shellbt

    Standalone pure-stdlib Python scanner that runs read-only probes to detect the php2shell chain in PHP applications, covering CVE-2026-109618, CVE-2026-109619, a session handler mismatch and an LFI ses

    CLI toolPython · 78 stars · +4 this week · 14 days old