php2shell Checker
openai/php2shell-checkerReviewed by AI
What it does
This is a checking tool, not an exploit: it reads the PHP version a website or local install reports (via HTTP headers or a local check) and compares it to the versions fixed by an October 2026 advisory. It warns 'potentially vulnerable' for affected ranges and EOL branches, or 'unknown' when the version is unclear; the README states it sends no exploit probes. Ships as a Node.js script plus two packaged skills for the Codex AI assistant. For developers and site admins checking their own PHP exposure.
How easy it is to install
C · install 1 or 2 tools · Windows
There is no installer: running it needs Node.js installed first, then typing `node phpcheck.js <url>` in a terminal, or asking Codex to install the packaged skill.
Numbers on GitHub
- Stars
- 1,456on Oct 31, 2026
- Downloads
- —all releases
- Growth
- +18stars in 4 days
Stars over time
Facts
- Runs on
- Windows, macOS, Linux
- You need to install
- Node.js
- Disk space
- not determined
- Accounts or keys
- None
- Cost
- Free
- License
- Apache-2.0 (Permissive)
- Can replace
- Snyk
- Last update
- Oct 22, 2026
Risk signals
No risk signals found by the checks.
What Radar could not check
- Whether version detection via HTTP headers stays accurate on sites that hide or spoof their Server/X-Powered-By headers.
- Whether the listed upstream fixed versions stay accurate as further patches ship.
- What exactly the Codex skill installer executes when asked to install the skills from this repository.