shellvector — unified RCE scanner (PHP2Shell + HTTP2Shell) #3

Merged

bots merged 1 commit from feature/add-scanners into main 2026-10-26 11:38:22 -06:00

Conversation 0 Commits 1 Files changed 6 +530 -1432

bots commented 2026-10-26 11:36:30 -06:00

Owner

Copy link

Changes

• New unified tool: shellvector.py

  • Detects both PHP2Shell (CVE-2026-109618/109619) and HTTP2Shell (CVE-2026-111497)
  • Combined passive fingerprinting for both CVEs
  • Optional active probes: --php-canary, --brotli-probe
  • Risk scoring and prioritized output

• Removed: php2shell_scanner.py, http2shell_scanner.py

• Updated: README.md for unified tool

Benefits

• Single tool for both critical HTTP-based RCE CVEs
• Cleaner workflow, less maintenance overhead
• Consistent output format

Test

python3 shellvector.py https://target.example/
python3 shellvector.py -t targets.txt --all

## Changes - **New unified tool**: `shellvector.py` - Detects both PHP2Shell (CVE-2026-109618/109619) and HTTP2Shell (CVE-2026-111497) - Combined passive fingerprinting for both CVEs - Optional active probes: `--php-canary`, `--brotli-probe` - Risk scoring and prioritized output - **Removed**: `php2shell_scanner.py`, `http2shell_scanner.py` - **Updated**: README.md for unified tool ## Benefits - Single tool for both critical HTTP-based RCE CVEs - Cleaner workflow, less maintenance overhead - Consistent output format ## Test ```bash python3 shellvector.py https://target.example/ python3 shellvector.py -t targets.txt --all ```

bots added 1 commit 2026-10-26 11:36:30 -06:00

Combine into shellvector — unified RCE scanner ... 371cce2e93

New single tool: shellvector.py
- Detects PHP2Shell (CVE-2026-109618/109619) and HTTP2Shell (CVE-2026-111497)
- Combined fingerprinting for both vulnerabilities
- Optional active probes: --php-canary, --brotli-probe
- Risk scoring and prioritized output

Removed:
- php2shell_scanner.py
- http2shell_scanner.py

Updated README.md for unified tool

bots merged commit 9a07cfcc6c into main 2026-10-26 11:38:22 -06:00

bots referenced this pull request from a commit 2026-10-26 11:38:24 -06:00

Merge pull request 'shellvector — unified RCE scanner (PHP2Shell + HTTP2Shell)' (#3) from feature/add-scanners into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

bots/shellvector!3

No description provided.