php2shell-results
Lists the stored scan result history of the caller's company, newest first, one row per scanned target. Requires a logged-in session.
php2shell-results [scan=VALUE] [verdict=VALUE] [keyword=VALUE] [from=VALUE] [to=VALUE] [duration=VALUE]
- scan=VALUE
- Optional. Scan run GUID to limit the results to one run.
- verdict=VALUE
- Optional. Verdict: VULNERABLE, FIXED, INCONCLUSIVE, NO_SIGNAL, ERROR.
- keyword=VALUE
- Optional. Substring of the URL, host, PHP version or X-Powered-By value.
- from=VALUE
- Optional. Start time as yyyyMMddHHmmss. yyyyMMddHHmm, yyyyMMddHH and yyyyMMdd are also accepted.
- to=VALUE
- Optional. End time in the same formats as from. The specified time is not included.
- duration=VALUE
- Optional. Period back from now: m (minutes), h (hours) or d (days), for example 7d. Overrides from and to.
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Time | Scan time, e.g. 2026-10-24 13:05:00 |
| scan_guid | String | Scan GUID | Scan run GUID, e.g. 5b1c6e2a-8f4d-4e7b-9a31-0c2d7e9f1a44 |
| url | String | URL | Scanned URL, e.g. https://192.0.2.10/ |
| verdict | String | Verdict | e.g. VULNERABLE, FIXED, INCONCLUSIVE, NO_SIGNAL, ERROR |
| is_vulnerable | Boolean | Vulnerable | true when vulnerable, false when not, null when undecided, e.g. true |
| php_version | String | PHP version | Advertised PHP version, e.g. 8.3.12 |
| powered_by | String | X-Powered-By | X-Powered-By header, e.g. PHP/8.3.12 |
| sapi | String | SAPI | e.g. mod_php, PHP-FPM, mod_php/PHP-FPM, unknown |
| reason | String | Reason | Verdict reason, e.g. HTTP 502 from the fronting server |
| probe_count | Integer | Probes sent | Number of probes sent (0-3), e.g. 3 |