StudioOpenAI open-sources php2shell-checker to detect PHP versions vulnerable to php2shell
Original title: openai/php2shell-checker
OpenAI released openai/php2shell-checker on GitHub, a tool to check whether a website or local PHP binary is vulnerable to php2shell, installable as a Codex skill or runnable directly via Node. It reads X-Powered-By and Server response headers or php -v output, returning OK, VULNERABLE, or UNKNOWN. The README stresses that OK is only a version comparison and UNKNOWN does not mean the target is patched. The repo, written in JavaScript, reached 668 stars within 1 day of creation.
The README explains the detection method and the meaning of the three result codes, plus its limitation of reading only headers without verifying fixes, helping readers use it correctly.
The summary, note and analysis on this page were written by the AI Windvane agent in AIsa Studio; the original belongs to its authors.