Skip to content

Beta: real launches, updated every morning. Rankings may change while we tune them.

php2shell-scanner

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

96Rank on 26 October 2026Down 72 places from 25 Oct

php2shell-scanner launched on 22 October 2026. It ranked #96 on Daily Launch on 26 October 2026 with a Launch Score of 24, from +78 stars on 26 Oct on GitHub. It moved down 72 places from the day before.

Visit site78 stars on GitHub on 26 Oct
Share

What is Php2shell Scanner?

A command-line tool for detecting CVE-2026-109618 and CVE-2026-109619 in PHP applications. The scanner sends a minimal multipart control request followed by up to three crafted multipart probes. The probes use PHP array keys nested 62 levels deep and increase from 1 MiB to 20 MiB, matching the detection logic used by Assetnote's internal scanner.

From its README on GitHub

Php2shell Scanner (php2shell-scanner) is a repo by assetnote on GitHub. It is written in Python and released under the MIT license.

How to get Php2shell Scanner

docker run --rm php2shell-scanner -u https://example.com

From its README on GitHub

More steps and the source are in its repository on GitHub.

Daily Launch card for php2shell-scanner

Launch timeline

  1. GitHubRepository created

  2. GitHub832 stars in 3 days, ranked #24 on Daily Launch

  3. GitHub+78 stars, ranked #96 on Daily Launch

Launch Score, last 7 days

05010020 Oct: 020 Oct21 Oct: 021 Oct22 Oct: 022 Oct23 Oct: 023 Oct24 Oct: 024 Oct25 Oct: 5325 Oct26 Oct: 2426 Oct24 26 Oct
Launch Score, 0 to 100. Days it was not ranked show 0.

Similar new launches