ikow /php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- Stars
- 1,923 stars
- Forks
- 649 forks
- Language
- Python
- License
- MIT
- Created
- Oct 21, 2026
- Last push
- Oct 28, 2026
- Updated
- Nov 2, 2026
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
- php-exploit
- php-security
- php2shell
- poc
- rce
- session-upload-progress
- suricata-rules
- vulnerability-research
- waf-rules
- wordpress-security
Admitted to the Repository Index on Oct 23, 2026: +1526 stars in 7 days.
Star History
14 days recorded, Oct 21, 2026 – Nov 3, 2026 (UTC). Net change +1,996 stars.
The star count of each day is the latest count less the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/ikow/php2shell-poc)Badge
[](https://awesomerepos.com/ikow/php2shell-poc)Timeline
This repository got 1,186 stars on Oct 21, 2026, the day it was created: its largest day recorded.
It gained stars on each of the 14 days with a record.
Its largest 7 days were Oct 21, 2026 to Oct 27, 2026: 1,905 stars.
It reached 1,000 stars on Oct 21, 2026, 0 days after it was created.
- Created on the Repository Host
- Reached 1,000 stars
- Largest star day recorded: +1,186 stars
- +391 stars in one day
- Entered the Repository Index: +1526 stars in 7 days
- +129 stars in one day
- Latest push
From the Repository Host's creation date and releases, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. On the chart of net stars each day, a solid line marks a release.
Forks and pushes
From 11 Observations, Oct 24, 2026 – Nov 3, 2026. Forks +59. A new push was seen on 1 of 10 days.
- Oct 25, 2026: no new push
- Oct 26, 2026: no new push
- Oct 27, 2026: no new push
- Oct 28, 2026: no new push
- Oct 29, 2026: new push
- Oct 30, 2026: no new push
- Oct 31, 2026: no new push
- Nov 1, 2026: no new push
- Nov 2, 2026: no new push
- Nov 3, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Observations
What the Repository Host reported each day.
| Day (UTC) | Stars | Forks | Last push | Archived |
|---|---|---|---|---|
| Nov 3, 2026 | 1,923 | 649 | Oct 28, 2026 | No |
| Nov 2, 2026 | 1,922 | 649 | Oct 28, 2026 | No |
| Nov 1, 2026 | 1,918 | 650 | Oct 28, 2026 | No |
| Oct 31, 2026 | 1,911 | 649 | Oct 28, 2026 | No |
| Oct 30, 2026 | 1,896 | 645 | Oct 28, 2026 | No |
| Oct 29, 2026 | 1,890 | 642 | Oct 28, 2026 | No |
| Oct 28, 2026 | 1,866 | 637 | Oct 22, 2026 | No |
| Oct 27, 2026 | 1,832 | 631 | Oct 22, 2026 | No |
| Oct 26, 2026 | 1,790 | 620 | Oct 22, 2026 | No |
| Oct 25, 2026 | 1,754 | 607 | Oct 22, 2026 | No |
| Oct 24, 2026 | 1,693 | 590 | Oct 22, 2026 | No |