⬢github Python · 905 ★ +5 since we first saw it · pushed 2 d ago · MIT
assetnote/php2shell-scanner
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
A Python CLI scanner that detects whether PHP applications are vulnerable to php2shell (CVE-2026-109618 and CVE-2026-109619). It sends crafted multipart probes designed to trigger memory exhaustion or PHP-FPM worker failures, then applies mod_php and PHP-FPM verdict rules to classify hosts. It supports scanning host lists and custom paths, multithreaded runs, Docker deployment, and JSON output of vulnerable hosts.
Why now: It's a recently released, high-fidelity open-source scanner from Assetnote for two newly disclosed CVEs, and it's trending as one of the most-starred new repos.
Who it is for: Security teams, pentesters, and sysadmins who need to check their PHP servers for the php2shell vulnerabilities.
Stars over our 17 snapshots: 900 to 905, since 4 h ago.
Where people talked about it
- ⬢github new repos, most starred 8 min ago
API: https://socialmediatrends-api.osmike.com/v1/repos/assetnote/php2shell-scanner