Show HN: Php2ShellCheck – Python script that checks for vuln indicators

Category: security

Tags: security, scanner, php, http, vulnerability-detection

Score: 4.8/10 (Innovation: 3, Technical: 4, Documentation: 8, Utility: 4)

PHP2ShellCheck is a Python script that asynchronously scans HTTP/HTTPS headers to detect PHP version banners and compares them against fixed releases for two hypothetical CVEs (CVE-2026-109618 and CVE-2026-109619). It classifies hosts as vulnerable, end-of-life, version unknown, or patched based on header signals. The tool is well-documented but narrowly scoped to a specific, non-real vulnerability, limiting its practical utility.

Target audience: security researchers, penetration testers, sysadmins

Repository: https://github.com/jgatka/php2shellcheck · Python · MIT · 3 stars

View on Hacker News