php2shell
A single-file Python tool that fingerprints a target, verifies the confirmed session.upload_progress session-file poisoning primitive, and produces a coarse exposure verdict — without shipping a weaponized RCE exploit.
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 21, 2026 · 13 upvotes (top 81%)
- Security
- Observability & eval
- Developer
- Not AI
- Hobby / open-source project
- cve-2026-109618
- cve-2026-109619
- php2shell
Similar launches
See all 301 similar launches →Could you build this?
No This is a security tool built around a PHP session-handling vulnerability primitive. Verifying that primitive and producing reliable exposure verdicts requires vulnerability-research expertise in PHP internals that vibe coding cannot supply.
What it would actually take: Building a real version means deep vulnerability research on PHP's session and upload-progress internals, along with reliable fingerprinting across builds and configurations. That is specialist security work, and it should be pursued only within authorized testing and disclosure processes. The details are not included here.
Competitors
Other products that read as similar to this one : 301 launches clear the similarity bar, closest 8 shown.
Attention rank: #233 of 302 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 355 days after the earliest competitor.
- php2shell-exploit · github · 2026-10-22 · 23 upvotes · similarity 0.64
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.58
- php-safe · github · 2026-10-21 · 14 upvotes · similarity 0.57
- php-rce · github · 2026-10-21 · 30 upvotes · similarity 0.56
- php_uploadprogress_guard · github · 2026-10-21 · 111 upvotes · similarity 0.55
- php2shell-protection · github · 2026-10-21 · 93 upvotes · similarity 0.54
- Bastion · github · 2026-10-22 · 57 upvotes · similarity 0.54
- digital-evidence-integrity-timeline-analyzer · github · 2026-10-14 · 9 upvotes · similarity 0.54
Other launches for this product
More details
- External ID
- 1428239564
- Company
- n/a
- Product
- php2shell
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 0.19
- All tags
- cve-2026-109618, cve-2026-109619, php2shell
- AI summary
- scanner for php session upload progress poisoning
- Manually corrected
- No