devploit /php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- Stars
- 275 stars
- Forks
- 76 forks
- Language
- Python
- License
- MIT
- Created
- Oct 21, 2026
- Last push
- Oct 30, 2026
- Updated
- Nov 2, 2026
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
- penetration-testing
- php
- php-security
- poc
- rce
- red-team
- security-research
- session-upload-progress
- vulnerability-research
- apache
- bug-bounty
- cve
- exploit-development
- heap-exploitation
- php-exploit
- pre-auth-rce
Admitted to the Repository Index on Oct 24, 2026: +141 stars in 7 days.
Star History
13 days recorded, Oct 22, 2026 – Nov 3, 2026 (UTC). Net change +285 stars.
The star count of each day is the latest count less the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/devploit/php2shell)Badge
[](https://awesomerepos.com/devploit/php2shell)Timeline
This repository got 108 stars on Oct 22, 2026, its largest day since it was created on Oct 21, 2026.
It gained stars on 12 of the 13 days with a record.
It reached 100 stars on Oct 23, 2026, 2 days after it was created.
- Created on the Repository Host
- Largest star day recorded: +108 stars
- Reached 100 stars
- +34 stars in one day
- Entered the Repository Index: +141 stars in 7 days
- Latest push
- +56 stars in one day
From the Repository Host's creation date, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day.
Forks and pushes
From 10 Observations, Oct 25, 2026 – Nov 3, 2026. Forks +24. A new push was seen on 1 of 9 days.
- Oct 26, 2026: no new push
- Oct 27, 2026: no new push
- Oct 28, 2026: no new push
- Oct 29, 2026: no new push
- Oct 30, 2026: no new push
- Oct 31, 2026: new push
- Nov 1, 2026: no new push
- Nov 2, 2026: no new push
- Nov 3, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Observations
What the Repository Host reported each day.
| Day (UTC) | Stars | Forks | Last push | Archived |
|---|---|---|---|---|
| Nov 3, 2026 | 275 | 76 | Oct 30, 2026 | No |
| Nov 2, 2026 | 267 | 73 | Oct 30, 2026 | No |
| Nov 1, 2026 | 242 | 66 | Oct 30, 2026 | No |
| Oct 31, 2026 | 186 | 59 | Oct 30, 2026 | No |
| Oct 30, 2026 | 182 | 58 | Oct 22, 2026 | No |
| Oct 29, 2026 | 180 | 58 | Oct 22, 2026 | No |
| Oct 28, 2026 | 180 | 57 | Oct 22, 2026 | No |
| Oct 27, 2026 | 172 | 57 | Oct 22, 2026 | No |
| Oct 26, 2026 | 161 | 53 | Oct 22, 2026 | No |
| Oct 25, 2026 | 153 | 52 | Oct 22, 2026 | No |