search
Php2shell
Trends
- 1Chained PHP2Shell exploit roots 25 servers including US government systems●Chained PHP2Shell exploit roots 25 servers, including US Government servers
A chained exploit dubbed PHP2Shell has been used to gain root access on 25 servers, including machines belonging to the US government. The attack combines vulnerabilities to escalate from PHP-based access to full system control. The disclosure is drawing attention from security professionals discussing how the chain works and what it means for exposed server deployments.
Repos
- ikow/php2shell-poc CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-
- 9bie/php2shell-bypass-aslr-exp A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit
- openai/php2shell-checker
- assetnote/php2shell-scanner High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
- eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in