Nicheloom visits: 28,984 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

php2shell

PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 97 upvotes (top 15%)

Similar launches

See all 120 similar launches →

Could you build this?

No This is a research toolkit for a pre-auth remote code execution vulnerability in PHP. Building it requires specialized vulnerability research, heap and memory-layout expertise, and version-specific analysis that vibe coding cannot provide.

What it would actually take: A real version requires deep expertise in PHP internals, memory layout, and the specific CVE. It must be used only for authorized testing and defensive work. The technical details are not included here.

Competitors

Other products that read as similar to this one : 120 launches clear the similarity bar, closest 8 shown.

Attention rank: #13 of 121 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 347 days after the earliest competitor.

Other launches for this product

More details
External ID
1429010697
Company
n/a
Product
php2shell
Website domain
github.com
Cohort
n/a
Upvotes percentile
0.85
All tags
cve-2026-109618, cve-2026-109619, exploit, mod-php, penetration-testing, php, php-security, php2shell, poc, rce, red-team, security-research, session-upload-progress, vulnerability-research
AI summary
version-aware toolkit for php session rce security research
Manually corrected
No