Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
-
Updated
Nov 9, 2026 - Python
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.
Next-generation exploit orchestrator for CVE-2026-109618/619 — adds Cloudflare WAF bypass, flexible target specification (URL/host/port/path/batch), multi-format output (JSON/CSV/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.
Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.
A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)
Detect php2shell (CVE-2026-109618 / CVE-2026-109619) on remote PHP targets — behavioral multipart probes, version fallback, async CLI in PHP.
Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.
Yanrevenge adalah repositori alat eksploitasi etis yang dikembangkan dan diuji secara terbatas dalam lingkungan laboratorium
CVE-2026-109618-109619 PHP2shell
PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619
Security mitigations and auditing tools shared for the public good. 💞
PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.
CVE-2026-109618 · CVE-2026-109619
Research case study on two critical PHP flaws that leaked before the patch. Covers impact, mitigation, and the AI angle. No exploit code, based on public sources.
Universal PHP security scanner & native EOL patches (PHP 5.2–8.1) for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560 across FastPanel, cPanel, Plesk, aaPanel, ISPmanager, DirectAdmin & System PHP.
Script capaz de detectar e te auxiliar a corrigir a vulnerabilidade php2shell
Published indicators and a log-hunting guide for the PHP2Shell PHP flaws (CVE-2026-109618, CVE-2026-109619)
To associate your repository with the php2shell-cve-2026 topic, visit your repo's landing page and select "manage topics."