devploit/php2shell
- Total stars
- 125
- Today · UTC
- +1since 11:50 UTC
More actions
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
Save to My finds to follow releases and star growth. Saved in this browser.
About the project
Research toolkit for exploiting pre-auth RCE in PHP's Apache module (session.upload_progress) via CVE-2026-109618 and CVE-2026-109619, with build profiles, labs and calibration.
Useful for
- Test your own PHP server for the vulnerability in an isolated Docker lab
- Select the build profile and offsets for a specific PHP version
- Assess mod_php deployment exposure before patching
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate. Read the original README →
Star growth looks organic. Data as of October 23, 2026, 12:44 UTC.
The star-growth assessment does not verify whether the project is safe to run.
Stars per day
Bars show stars per UTC day; the line is a moving average of available history. Gaps mean missing data, not zero growth. Today's bar is incomplete. Red marks spike days.
Why it’s trending
- Star-counter measurements on 2026-10-23 (UTC), 11:50–12:32: 124 → 125 stars (+1). This is the change over that interval.
- Estimated end-of-day forecast: about +26 stars, using observed gains and the previous day.
- The repository is 2 days old and already has 125 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #198.
- About 21 forks a day — people are taking the code.
- Recent forks include notable developers: @KhanhNguyen9872 (660 followers).
Measured growth: the last 7 completed days
The full 7-day window is unavailable; no weekly total or comparison is calculated.
Daily measurements · UTC
- October 16, 2026
- —
- October 17, 2026
- —
- October 18, 2026
- —
- October 19, 2026
- —
- October 20, 2026
- —
- October 21, 2026
- 0
- October 22, 2026
- 110
Largest measured day in the last 30 days: 110 · October 22, 2026. Days with data: 2.
Completed days come from GitHub star history; today and forecasts are excluded from this comparison. History checked: October 23, 2026, 12:44 UTC. Sources and measurement limits →
Three GitHub discoveries in each edition
What they do, why they are gaining interest, and what to check before using them.
Editions at 10:00, 16:00, 22:00 MSK.
Numbers
- Total stars
- 125
- Today
- +1 star measured 2026-10-23, 11:50–12:32 UTC, ≈ 26 by evening
- Forks
- 37
- Issues and pull requests
- 4
- Watchers
- 1
- Language
- Python
- License
- MIT
- Created
- October 21, 2026
- Last push
- October 22, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 23, 2026Top new repositories this week: #198
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/devploit/php2shell)