php2shell-poc
php2shell-poc is CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis - ikow/php2shell-poc. It is ranked #948 on the Dev Radar, in Security, first seen 9 days ago and shared in 2 posts (49.4k views).
GitHub - ikow/php2shell-poc: CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis · GitHub Skip to content Navigation Menu Sign in Appearance settings Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Repository navigation php2shell-poc Public Notifications You must be signed in to change notification settings Fork 167 ( 167 ) Star 401 ( 401 ) You must be signed…
What people said about php2shell-poc on X
🚨 Critical pre-authentication RCE research published for two PHP core vulnerabilities; CVE-2026-109618 + CVE-2026-109619 PoC: https://github.com/ikow/php2shell-poc The flaws affect PHP's session.upload_progress handling and can be chained through session-file injection, memory corruption, or deserialization behavior…
— @DarkWebInformer, 9 days ago · 586 likes · see the post
PHP2Shell Poc : Critical pre-auth RCE in PHP (CVE-2026-109618/CVE-2026-109619). Roughly 78% of websites potentially exposed, including many WordPress installs. Patches are out (8.2.35+, 8.3.36+, 8.4.27+, 8.5.12+). PoC: - https://github.com/ikow/php2shell-poc
— @0x0SojalSec, 9 days ago · 39 likes · see the post
Alternatives to php2shell-poc
- rea — Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android…
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- GitHub Docs — You can customize your profile so that other people can get a better sense of who you are and the work you do.
- security-audit-skill — I highly recommend cloudflare's security audit skill
php2shell-poc in numbers
- Rank on the Dev Radar: #948 of 8801
- Shared in 2 posts by 2 accounts: @DarkWebInformer, @0x0SojalSec
- 49.4k views on those posts
- First seen 9 days ago, last shared 9 days ago
- Pricing seen by AGK Intelligence: open source
- Market: Security
FAQ
What is php2shell-poc?
CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis - ikow/php2shell-poc It was first shared on X 9 days ago and is ranked #948 on the Dev Radar.
Is php2shell-poc free?
It is open source.
Who shared php2shell-poc?
2 accounts on X, including @DarkWebInformer, @0x0SojalSec, in 2 posts totalling 49.4k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 21:12 UTC. Full method.