Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

aarsaputra/php2shell

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

Visit GitHub
Python
133
62
1 contributors
Custom license
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast aarsaputra/php2shell is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Oct 23 – Nov 5, 2026

Stars +62 in 14 days

051015
13

Forks +62 in 14 days

0102030
22

Merged PRs 0 in 14 days

01

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Oct 23Oct 25Oct 27Oct 29Oct 31Nov 2Nov 4
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Fri, Oct 23, 2026+0+130
Sat, Oct 24, 2026+0+220
Sun, Oct 25, 2026+3+130
Mon, Oct 26, 2026+13+50
Tue, Oct 27, 2026+12+20
Wed, Oct 28, 2026+10+10
Thu, Oct 29, 2026+4+00
Fri, Oct 30, 2026+7+30
Sat, Oct 31, 2026+0+10
Sun, Nov 1, 2026+1+20
Mon, Nov 2, 2026+1+00
Tue, Nov 3, 2026+1+00
Wed, Nov 4, 2026+4+00
Thu, Nov 5, 2026+6+00
Total+62+620
  • 1#1 on the list
  • 7Rank that day
  • Not trending

You might also like

Repositories close to aarsaputra/php2shell
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

devploit/php2shell

Python

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

28276

pentestershell/php2shellbt

Python

Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.

7919

assetnote/php2shell-scanner

Python

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

985145

murrez/php2shell

Python

php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.

10235

dimasma0305/php2shell

Python

Reproducible PHP request-state RCE labs and self-checking PoC

5826

ikow/php2shell-poc

Python

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

1.9k646

JoasASantos/php2shell-exploit

Python

PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE

19457

aancw/php2shell-scanner

Go

Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.

10215

JoasASantos/php2shell-scanner

Python

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

11131