aarsaputra/php2shell
- Total stars
- 109
- Today
- +0since 00:03 UTC
More actions
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
Save to My finds to follow releases and star growth. Saved in this browser.
About the project
Research toolkit reproducing an unauthenticated RCE chain in PHP 5.4–8.4.26 (CVE-2026-109619/109618) over pure HTTP with JA3 impersonation and capped proof-of-access commands.
Useful for
- Reproduce the vulnerable PHP setup in a Docker lab to test the chain
- Check a server's PHP version and build date for CVE-2026-109619/109618
- Retrieve proof of access with an id command without deploying a full backdoor
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate. Read the original README →
Star growth looks organic. Data as of October 29, 2026, 00:56 UTC.
The star-growth assessment does not verify whether the project is safe to run.
Stars per day
Bars show stars per UTC day; the line is a moving average of available history. Gaps mean missing data, not zero growth. Today's bar is incomplete. Red marks spike days.
Why it’s trending
- Star-counter measurements on 2026-10-29 (UTC), 00:03–00:51: 109 → 109 stars (+0). This is the change over that interval.
- Estimated end-of-day forecast: about +8 stars, using observed gains and the previous day.
- The repository is 6 days old and already has 109 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #188.
Measured growth: the last 7 completed days
The full 7-day window is unavailable; no weekly total or comparison is calculated.
Daily measurements · UTC
- October 22, 2026
- —
- October 23, 2026
- 32
- October 24, 2026
- 33
- October 25, 2026
- 15
- October 26, 2026
- 14
- October 27, 2026
- 6
- October 28, 2026
- 9
Largest measured day in the last 30 days: 33 · October 24, 2026. Days with data: 6.
Completed days come from GitHub star history; today and forecasts are excluded from this comparison. History checked: October 29, 2026, 00:56 UTC. Sources and measurement limits →
Three GitHub discoveries in each edition
What they do, why they are gaining interest, and what to check before using them.
Editions at 10:00, 16:00, 22:00 MSK.
Numbers
- Total stars
- 109
- Today
- +0 stars measured 2026-10-29, 00:03–00:51 UTC, ≈ 8 by evening
- Forks
- 55
- Issues and pull requests
- 0
- Watchers
- 0
- Language
- Python
- Latest release
- v1.5.1 · October 26, 2026
- Created
- October 23, 2026
- Last push
- October 28, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 29, 2026Top new repositories this week: #188
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/aarsaputra/php2shell)