php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 23, 2026 · 96 upvotes (top 15%)
- Security
- Developer
- Not AI
- Hobby / open-source project
- cve
- exploit
- penetration-testing
- php
- php2shell
- php2shell-cve
- +9 more
Similar launches
See all 1061 similar launches →Could you build this?
No An unauthenticated RCE toolkit for newly disclosed PHP vulnerabilities requires real vulnerability research and exploit development, which cannot be vibe-coded from public descriptions.
What it would actually take: Building this requires understanding the session.upload_progress handler at the source level, crafting a multi-step exploit chain, and handling TLS fingerprinting and version variance. It takes security researchers with exploit-development skills and is dual-use in nature.
Competitors
Other products that read as similar to this one : 1061 launches clear the similarity bar, closest 8 shown.
Attention rank: #145 of 1062 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 359 days after the earliest competitor.
- php-safe · github · 2026-10-21 · 14 upvotes · similarity 0.74
- php2shell-poc · github · 2026-10-21 · 17 upvotes · similarity 0.72
- php-rce · github · 2026-10-21 · 36 upvotes · similarity 0.72
- php2shell-poc · github · 2026-10-21 · 11 upvotes · similarity 0.68
- php2shell-protection · github · 2026-10-21 · 114 upvotes · similarity 0.68
- php2shell-fpm-exp · github · 2026-10-22 · 13 upvotes · similarity 0.67
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 47 upvotes · similarity 0.67
- php2shell-poc · github · 2026-10-21 · 1784 upvotes · similarity 0.66