aarsaputra /php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- Stars
- 122 stars
- Forks
- 61 forks
- Language
- Python
- License
- OTHER
- Created
- Oct 23, 2026
- Last push
- Oct 29, 2026
- Updated
- Nov 2, 2026
- exploit
- php
- php2shell
- php2shell-cve
- php2shell-cve-2026
- php2shell-vulnerability
- rce
- rce-scanner
- shell
- shell-backdoor
- cve
- penetration-testing
- poc
- security
- vulnerability-research
Admitted to the Repository Index on Oct 28, 2026: +100 stars in 7 days.
Star History
12 days recorded, Oct 23, 2026 – Nov 3, 2026 (UTC). Net change +129 stars.
The star count of each day is the latest count less the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/aarsaputra/php2shell)Badge
[](https://awesomerepos.com/aarsaputra/php2shell)Timeline
This repository got 33 stars on Oct 24, 2026, its largest day since it was created on Oct 23, 2026.
It gained stars on 11 of the 12 days with a record.
It reached 100 stars on Oct 28, 2026, 5 days after it was created.
- Created on the Repository Host
- +32 stars in one day
- Largest star day recorded: +33 stars
- +15 stars in one day
- Entered the Repository Index: +100 stars in 7 days
- Reached 100 stars
- Latest push
From the Repository Host's creation date and releases, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. On the chart of net stars each day, a solid line marks a release.
Forks and pushes
From 6 Observations, Oct 29, 2026 – Nov 3, 2026. Forks +6. A new push was seen on 1 of 5 days.
- Oct 30, 2026: new push
- Oct 31, 2026: no new push
- Nov 1, 2026: no new push
- Nov 2, 2026: no new push
- Nov 3, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Observations
What the Repository Host reported each day.
| Day (UTC) | Stars | Forks | Last push | Archived |
|---|---|---|---|---|
| Nov 3, 2026 | 122 | 61 | Oct 29, 2026 | No |
| Nov 2, 2026 | 121 | 61 | Oct 29, 2026 | No |
| Nov 1, 2026 | 120 | 59 | Oct 29, 2026 | No |
| Oct 31, 2026 | 120 | 58 | Oct 29, 2026 | No |
| Oct 30, 2026 | 113 | 55 | Oct 29, 2026 | No |
| Oct 29, 2026 | 109 | 55 | Oct 28, 2026 | No |