A self-contained PHP webshell scanner that uses token analysis, hash filtering, machine learning, and entropy-based anomaly detection to hunt for backdoors, supports legacy PHP 4.3 to the very recent PHP 8, no dependencies required
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
