A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)
-
Updated
Oct 28, 2026 - Python
A Python-based PHP shell uploader and backdoor framework for red teamers and bug bounty hunters. (Educational purposes only)
PHP2Shell (CVE-2026-109618/109619) exposure scanner — finds unpatched / end-of-life PHP hosts on an internal network. Bilingual, no-dependency Windows tool.
Read-only scanner and config patcher to detect and work around CVE-2026-109618 / CVE-2026-109619 on PHP, with a full detection and harening manual.
Universal PHP security scanner & native EOL patches (PHP 5.2–8.1) for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560 across FastPanel, cPanel, Plesk, aaPanel, ISPmanager, DirectAdmin & System PHP.
To associate your repository with the php2shell-check topic, visit your repo's landing page and select "manage topics."