Remove https_to_shell scanner; keep php2shell and http2shell #2

Merged

bots merged 4 commits from feature/add-scanners into main 2026-10-26 11:30:35 -06:00

Conversation 0 Commits 4 Files changed 7 +651 -914

bots commented 2026-10-26 11:08:12 -06:00

Owner

Copy link

Changes

• Removed https_to_shell_scanner.py (general web recon)
• Kept two focused CVE scanners:
  • php2shell_scanner.py (CVE-2026-109618/109619)
  • http2shell_scanner.py (CVE-2026-111497)
• Updated README.md for two-scanner suite

Summary

Final suite: PHP2Shell + HTTP2Shell (Brotli) CVE detectors.

## Changes - Removed `https_to_shell_scanner.py` (general web recon) - Kept two focused CVE scanners: - `php2shell_scanner.py` (CVE-2026-109618/109619) - `http2shell_scanner.py` (CVE-2026-111497) - Updated README.md for two-scanner suite ## Summary Final suite: PHP2Shell + HTTP2Shell (Brotli) CVE detectors.

bots added 4 commits 2026-10-26 11:08:12 -06:00

Complete scan session: 7 targets, 1 vulnerable, 2 medium risk ... fd09c79645

php2shell_scanner results:
- VULNERABLE: php2shell.uk (PHP 8.3.6 < 8.3.36)
- UNKNOWN: 6 targets (hidden versions, DNS issues, or 403)

https_to_shell_scanner results:
- MEDIUM: git.the424.com (sitemap leak), php2shell.uk (sitemap leak)
- LOW: 5 targets (including your Pi at 136.60.68.22)

Fixes applied:
- Python 3.14 typing compat (list import)
- S3 fallback false positive filter
- args reference bug fix

Add jpwile.the424.com (Vercel, LOW risk) to scan targets b8881d6fe7

Add HTTP2Shell scanner (CVE-2026-111497) and update docs ... b0fcc2a73d

New scanner: http2shell_scanner.py
- Detects Brotli decoder vulnerability (CVE-2026-111497)
- Originally Node2Shell, now affects Node.js, Python, Bun, Envoy, Istio
- Passive fingerprinting + optional active Brotli probe

Updated README.md:
- Added Scanner 3 section for HTTP2Shell
- Fixed versions matrix for Brotli, Node.js, Bun, Envoy, Istio
- Summary comparison table for all 3 scanners
- HTTP2Shell references (Upwind, JFrog, SecurityWeek)

Fixes applied in this session:
- Python 3.14 typing compat (list import)
- S3 fallback false positive filter in https_to_shell
- args reference bug fix

Remove https_to_shell_scanner; keep php2shell and http2shell ... 5f5609b782

- Deleted https_to_shell_scanner.py (general web recon)
- Deleted https_results.json, https_results.csv
- Updated README.md:
  - Changed 'Three scanners' to 'Two scanners'
  - Removed Scanner 2 (https_to_shell) section entirely
  - Renamed Scanner 3 to Scanner 2 (http2shell)
  - Updated Summary Comparison table (removed https_to_shell row)
  - Updated Files table (removed https_to_shell entry)
  - Removed https_to_shell caveats section
- Kept: php2shell_scanner.py, http2shell_scanner.py, targets.txt

bots merged commit e38cb9796d into main 2026-10-26 11:30:35 -06:00

bots referenced this pull request from a commit 2026-10-26 11:30:36 -06:00

Merge pull request 'Remove https_to_shell scanner; keep php2shell and http2shell' (#2) from feature/add-scanners into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

bots/shellvector!2

No description provided.