php2shell-scanner
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
php2shell-scanner launched on 22 October 2026. It ranked #96 on Daily Launch on 26 October 2026 with a Launch Score of 24, from +78 stars on 26 Oct on GitHub. It moved down 72 places from the day before.
What is Php2shell Scanner?
A command-line tool for detecting CVE-2026-109618 and CVE-2026-109619 in PHP applications. The scanner sends a minimal multipart control request followed by up to three crafted multipart probes. The probes use PHP array keys nested 62 levels deep and increase from 1 MiB to 20 MiB, matching the detection logic used by Assetnote's internal scanner.
From its README on GitHub
Php2shell Scanner (php2shell-scanner) is a repo by assetnote on GitHub. It is written in Python and released under the MIT license.
How to get Php2shell Scanner
docker run --rm php2shell-scanner -u https://example.comFrom its README on GitHub
More steps and the source are in its repository on GitHub.