Skip to content

Releases: CompleTetech-Security/php2shell-check

Release list

php2shell-check v1.0.1

php2shell-check v1.0.1 Latest
Latest

Choose a tag to compare

View all tags
@CompleteDotTech CompleteDotTech released this 26 Oct 05:28
v1.0.1
This tag was signed with the committer’s verified signature.
CompleteDotTech Timothy Wayne Gregg
SSH Key Fingerprint: Zc/p6W5B7uc/W9/TwrtA7jc7WInkXyYQ4qgMJzpNML0
Verified
Learn about vigilant mode.
91299cf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release of php2shell-check 1.0.1 from commit 91299cf90e20c6b29ed0c6df0b21ebe4ce376623.

Downloads

  • php2shell-check-1.0.1-source.zip contains the complete tracked source, documentation, examples, tests and license files.
  • Standalone files: wordpress_check.py.
  • RELEASE_MANIFEST.json records source identity and artifact hashes; SHA256SUMS covers every attached file except itself.
  • Retain the included licensing and brand terms. Verify download hashes before use and read the packaged README for supported usage.

Scope

  • Updated passive PHP2Shell checker with reviewed output durability, identity, and worker/WordPress integration changes.
  • This release uses the current AGPL-3.0/commercial licensing policy. Existing v1.0.0 release and assets remain unchanged under their original MIT license.
  • The public Python CLI remains independent from optional worker and WordPress integrations.
  • Reported versions and configuration are evidence; potentially_affected is not confirmed exploitability, fixed_version_reported is not a safety guarantee, and exploitability remains not_tested.
  • Use Python 3.10 or newer. No runtime dependency installation is required for the standalone entry point.

These artifacts do not add exploitation or deployed-patch attestation. Optional integrations must still follow their documented authorization and safety controls.

Assets 10
Loading

v1.0.0: PHP2Shell checker with branded HTML reports

v1.0.0: PHP2Shell checker with branded HTML reports

Choose a tag to compare

View all tags
@CompleteDotTech CompleteDotTech released this 22 Oct 00:09
v1.0.0
d605f46
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First tagged release of php2shell-check under CompleteTech LLC.

Highlights

  • Passive triage for CVE-2026-109618 and CVE-2026-109619 using upstream fix thresholds (8.2.35, 8.3.36, 8.4.27, 8.5.12), with rules checked on 2026-10-21.
  • New --format html report: a single offline file with your logo, summary tiles and results sorted by risk. Rebrand it with --logo and --brand.
  • CSV and JSON output, robots.txt compliance, verified TLS, no exploit payloads.
  • Single Python file, no dependencies, Python 3.10+.

Get started

python wordpress_check.py --input websites.txt --format html --output report.html

example-report.html (attached) is a synthetic sample built from reserved example.* domains.

Potential exposure is not confirmed exploitability. See the methodology.

Loading