Add https-to-shell scanner and comprehensive README #1

Merged

bots merged 3 commits from feature/add-scanners into main 2026-10-26 09:39:42 -06:00

Conversation 0 Commits 3 Files changed 5 +223 -4

bots commented 2026-10-26 09:14:05 -06:00

Owner

Copy link

Changes

• Added https_to_shell_scanner.py - HTTP-to-shell reconnaissance scanner
• Updated README.md with documentation for both scanners
• Service fingerprinting, CVE matching, leak detection, upload endpoint discovery

Testing

• Syntax verified with py_compile
• Both scanners executable and ready

Resolves: Initial scanner suite setup

## Changes - Added `https_to_shell_scanner.py` - HTTP-to-shell reconnaissance scanner - Updated `README.md` with documentation for both scanners - Service fingerprinting, CVE matching, leak detection, upload endpoint discovery ## Testing - Syntax verified with py_compile - Both scanners executable and ready Resolves: Initial scanner suite setup

bots added 1 commit 2026-10-26 09:14:05 -06:00

Add feature branch marker 2ac5629554

bots added 1 commit 2026-10-26 09:21:01 -06:00

Fix Python 3.14 typing compat, add targets.txt and scan results ... 56cd8e2caa

- Removed 'list' import from typing (Python 3.14+ has built-in list)
- Fixed args reference bug in CVE matching logic
- Added targets.txt with 4 test URLs
- Ran both scanners against targets
- Results: 1 VULNERABLE (php2shell.uk PHP 8.3.6), 3 UNKNOWN

Scan highlights:
- php2shell.uk: PHP 8.3.6 < 8.3.36 (VULNERABLE), LiteSpeed/Drupal, medium risk
- php-check.cybelangel.com: PHP 8.5 (no patch number, UNKNOWN)
- Others: No PHP version disclosed (UNKNOWN)

bots added 1 commit 2026-10-26 09:38:49 -06:00

Fix S3 fallback false positives in leak detection ... 259b8276d4

- Compare leaked file content against index.html
- Skip files with identical size and content (S3 website fallback)
- Verified: michaelkabatek.com now shows LOW (was CRITICAL false positive)
- Real leaks still detected: git.the424.com, php2shell.uk

bots merged commit fbb4a007d1 into main 2026-10-26 09:39:42 -06:00

bots referenced this pull request from a commit 2026-10-26 09:39:44 -06:00

Merge pull request 'Add https-to-shell scanner and comprehensive README' (#1) from feature/add-scanners into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

bots/shellvector!1

No description provided.