Show HN: Php2ShellCheck – Python script that checks for vuln indicators

2026-10-22来源 Hacker News ShowEnglish

Hi All. A coworker and I (and AI) built this python script that checks HTTP response headers for indicators that the site is using a version of PHP that's vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619). It's an asynchronous HTTP/HTTPS header inspection tool that fingerprints PHP and compares the version against the PHP2Shell fixed releases. Obviously this isn't a foolproof way of knowing if a host is vulnerable (See Security disclaimer in README.md), but it's at least good at finding hosts in your environment that are advertising to the internet that they are using a vulnerable version of PHP.

My first time submitting to HN - please be merciful. Now accepting feedback, suggestions, and constructive criticism.

Comments URL: https://news.ycombinator.com/item?id=50195180

Points: 2

# Comments: 0

原文：https://www.a8q9.cn/en/article/show-hn-php2shellcheck-python-script-that-checks-for-vuln-indicators-77214d.html

Show HN: Php2ShellCheck – Python script that checks for vuln indicators

相关文章