⬢github Python · 1.5K ★ +557 since we first saw it · pushed 1 d ago · MIT
ikow/php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
php2shell is a proof-of-concept and detection toolkit for two critical PHP vulnerabilities (CVE-2026-109618/109619) exploiting session.upload_progress and Zend engine OOM bailouts. It includes five pre-auth RCE chains affecting PHP 5.4–8.5, with three public exploits, lab setup, and detection rules for the patched bugs.
Why now: Freshly released alongside a detailed writeup, it demonstrates pre-auth RCE with no app-level vulnerability required (Chain D against mod_php), impacting most PHP websites — a major security story driving attention.
Who it is for: Security researchers, penetration testers, and PHP sysadmins needing to test exposure and deploy detection rules.
cve-2026-109618cve-2026-109619detection-rulesexploitphp-exploitphp-securityphp2shellpocrcesession-upload-progress
Stars over our 81 snapshots: 936 to 1.5K, since 2 d ago.
Where people talked about it
- ⬢github new repos, most starred 12 min ago
- ⬢github new repos, most starred 17 h ago
- ⬢github new repos, most starred 1 d ago
API: https://socialmediatrends-api.osmike.com/v1/repos/ikow/php2shell-poc