High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.