php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 22, 2026 · 23 upvotes (top 52%)
- Security
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
Similar launches
See all 178 similar launches →Could you build this?
No This is an offensive exploit framework that chains a PHP use-after-free into remote code execution, which requires deep vulnerability research and exploit development skill.
What it would actually take: Reproducing it requires understanding the PHP session.upload_progress UAF at the memory level, building a reliable heap-grooming exploit against specific PHP builds, and handling ASLR and mitigations. This is specialized exploit research that AI-assisted coding cannot substitute for.
Competitors
Other products that read as similar to this one : 178 launches clear the similarity bar, closest 8 shown.
Attention rank: #117 of 179 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 348 days after the earliest competitor.
- php2shell-poc · github · 2026-10-21 · 1524 upvotes · similarity 0.85
- php2shell · github · 2026-10-21 · 40 upvotes · similarity 0.83
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.82
- php2shell-Lab · github · 2026-10-21 · 22 upvotes · similarity 0.81
- php2shell · github · 2026-10-21 · 110 upvotes · similarity 0.78
- php2shell-poc · github · 2026-10-21 · 45 upvotes · similarity 0.77
- php2shell · github · 2026-10-21 · 97 upvotes · similarity 0.77
- php2shell · github · 2026-10-21 · 15 upvotes · similarity 0.76
Other launches for this product
- No other launches for this product.
More details
- External ID
- 1429745496
- Company
- n/a
- Product
- php2shell-exploit
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 0.48
- All tags
- n/a
- AI summary
- php session upload progress exploit framework for remote code execution
- Manually corrected
- No