1.ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
+132 stars
from 1,790 · score 4.89
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
4 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.devploit / php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
+106 stars
from 161 · score 4.67
3.syhunt / php2shell-protection
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
+4 stars
from 115 · score 1.61
4.JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
+4 stars
from 107 · score 1.61