← Journal
Security

OpenAI releases a PHP version checker for php2shell

XORit Editorial · Sources, AI assistance and corrections

OpenAI выпустила проверщик PHP-версий для php2shell

OpenAI published the php2shell-checker repository on GitHub, a tool for checking PHP versions for the php2shell vulnerability. The README describes two skills for Codex: phpcheck-url checks a site by its URL, while phpcheck-server checks when server access is available.

For a site, the checker looks for the version in the X-Powered-By and Server headers: it sends a HEAD request and uses GET if the response is 405 or 501. It gets the local version with the `php -v` command, then compares it with the threshold for the specified PHP branch.

An OK result means the stable version is above the built-in threshold, while VULNERABLE means it is not above it. UNKNOWN appears if the version or branch cannot be recognized, a newer prerelease build is detected, or the version is unavailable. The check does not independently confirm that a fix is present: an OK result is based on the assumption that subsequent stable versions of the corresponding branch contain it. UNKNOWN does not mean that the system is fixed.

Translation editors: Соловьев В., Пеков А.

Source: github.com ↗

← All newsRead XORit on Telegram ↗

Request a call
or contact us

Request a call

    How data is processed · SmartCaptcha data notice

    Your request has been successfully
    sent

    We will contact you shortly,
    to discuss cooperation details

    An error occurred
    while sending the form

    Please try again later
    or contact us directly: