php2shell-vulnerability

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.

Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.

Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.

A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)

Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.

PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619

Loopback-only PHP session serialize-handler mismatch lab with a harmless proof and negative control

Security mitigations and auditing tools shared for the public good. 💞

PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.

Script capaz de detectar e te auxiliar a corrigir a vulnerabilidade php2shell

Research case study on two critical PHP flaws that leaked before the patch. Covers impact, mitigation, and the AI angle. No exploit code, based on public sources.

Published indicators and a log-hunting guide for the PHP2Shell PHP flaws (CVE-2026-109618, CVE-2026-109619)

a explot for servers running php

Universal PHP security scanner & native EOL patches (PHP 5.2–8.1) for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560 across FastPanel, cPanel, Plesk, aaPanel, ISPmanager, DirectAdmin & System PHP.