PHP2Shell Scanner

Download 0
Last updated Oct 24, 2026

Commands

Registers the URL in each input row as a scan target and adds the result to the row. A target already registered with the same host, port and path is skipped. Requires administrator permission.

Deletes the scan target matching the URL in each input row, together with its scan result history. Requires administrator permission.

Lists the stored scan result history of the caller's company, newest first, one row per scanned target. Requires a logged-in session.

Scans one URL for the PHP2Shell vulnerability (CVE-2026-109618/109619) and returns one row with the verdict. A scan sends up to about 29 MiB to the target, so run it only against assets you are authorized to test. Cancelling the query stops the request in flight at once.

Reads a URL from each input row, scans it for the PHP2Shell vulnerability and adds the verdict to the row. The result is not stored; to record results, scan from the Scan Targets screen. Cancelling the query stops the request in flight at once.

Lists the registered scan targets of the caller's company with their latest verdict. Requires a logged-in session.