Loading…
Assess whether a PHP site is exposed to the php2shell RCEs (CVE-2026-109618 / CVE-2026-109619) and whether it has been patched since a stored baseline. Use when asked if a site is vulnerable to php2shell, to "check for the PHP RCE", to verify a PHP patch landed, or to scan one or many PHP hosts without credentials.
php2shell-scan is an agent skill entry in ChatHome Skills, sourced from GitHub Skill Search and scored 58/100. # php2shell-scan `php2shell-scan` decides two things about a PHP host: **is the vulnerable code path reachable** (pre-auth multipart / upload-progress, below th. As an agent skill, it packages a reusable instruction set that AI coding agents such as Codex and Claude Code can load to perform this task without hand-written glue code. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding php2shell-scan to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
codex skill install 0xrsydn/php2shell-scanReview the upstream source before running this command.
Scan coverage: Install metadata and the indexed document body.
Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.
# php2shell-scan `php2shell-scan` decides two things about a PHP host: **is the vulnerable code path reachable** (pre-auth multipart / upload-progress, below the application), and