OpenAI releases a PHP version checker for php2shell
XORit Editorial · Sources, AI assistance and corrections

OpenAI published the php2shell-checker repository on GitHub, a tool for checking PHP versions for the php2shell vulnerability. The README describes two skills for Codex: phpcheck-url checks a site by its URL, while phpcheck-server checks when server access is available.
For a site, the checker looks for the version in the X-Powered-By and Server headers: it sends a HEAD request and uses GET if the response is 405 or 501. It gets the local version with the `php -v` command, then compares it with the threshold for the specified PHP branch.
An OK result means the stable version is above the built-in threshold, while VULNERABLE means it is not above it. UNKNOWN appears if the version or branch cannot be recognized, a newer prerelease build is detected, or the version is unavailable. The check does not independently confirm that a fix is present: an OK result is based on the assumption that subsequent stable versions of the corresponding branch contain it. UNKNOWN does not mean that the system is fixed.
Translation editors: Соловьев В., Пеков А.
Source: github.com ↗