Nicheloom visits: 28,984 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

php2shell

Remote HTTP-only RCE on PHP 8.4.26 + Apache prefork/mod_php (ASLR bypass via session.upload_progress UAF) — self-contained Docker lab, one-click exploit.py

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 15 upvotes (top 73%)

Similar launches

See all 323 similar launches →

Could you build this?

No This is a working remote code execution exploit with an ASLR bypass against a specific PHP and Apache build. Producing it needs specialist exploit-development expertise that vibe coding cannot substitute for.

What it would actually take: A real version requires exploit-development skills in memory corruption, ASLR bypass techniques, and PHP internals, plus a controlled lab for testing. Use is appropriate only for authorized security research and defense. Exploit specifics are not included here.

Competitors

Other products that read as similar to this one : 323 launches clear the similarity bar, closest 8 shown.

Attention rank: #251 of 324 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 347 days after the earliest competitor.

Other launches for this product

More details
External ID
1428605646
Company
n/a
Product
php2shell
Website domain
github.com
Cohort
n/a
Upvotes percentile
0.27
All tags
n/a
AI summary
remote code execution lab for php 8.4 and apache
Manually corrected
No