ikow/php2shell-poc

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

★ 1.9k · 651 forks · Python

View on GitHub

Add it to your README

Charts use snapshots recorded by Repostream, starting at the first observation. README images are cached for 6 to 12 hours. Limited history is shown as collecting, never estimated.

Star history chart

[![Star history](https://repostream.com/chart/ikow/php2shell-poc.svg)](https://repostream.com/repo/ikow/php2shell-poc)

Trending rank badge

[![Trending on Repostream](https://repostream.com/badge/ikow/php2shell-poc.svg)](https://repostream.com/repo/ikow/php2shell-poc)

Want to see what is gaining stars fastest right now? Open the live leaderboard.