php2shell-helper

Overview

A single-file, dependency-free Bash tool that finds PHP vulnerable to PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on a Linux server and in its running containers, then helps you respond. It can mitigate (apply PHP's recommended temporary settings to reduce exposure), contain (take vulnerable services offline, after explaining exactly what that breaks), and patch (show step-by-step upgrade guidance for the host, then verify the fixed build is actually running). Detection is read-only and makes no network requests. Nothing changes unless you choose an action from the menu and confirm it. A report-only mode with exit codes supports automation across many servers.