Back Sploitus Exploit for Improperly Controlled Sequential Memory Allocation in Php
**Scanner versi PHP & framework eksploitasi PHP2Shell — otomatis dari dork sampai shell.**
 · [Español](README.es.md) · [日本語](README.ja.md) · [中文](README.zh.md)
PHP2Shell adalah toolkit audit keamanan PHP: menemukan host dengan versi PHP rentan, memverifikasi lewat header `X-Powered-By` / `Server`, lalu menjalankan rantai eksploitasi PHP2Shell (CVE-2026-109618 / CVE-2026-109619) hingga bukti eksekusi perintah.
> **$20** — Script ini dijual **$20** (lisensi per pengguna). Untuk pembelian, tanya-tanya, atau dukungan, hubungi admin.
| [**t.me/xiyyyyz**]( | [**Inspector AI**]( |
| **[CVE-2026-109618]( | PHP2Shell — OOM / longjmp | Use-after-free pada global basi setelah fatal OOM, dipicu flood header multipart |
| **[CVE-2026-109619]( | PHP2Shell — FPM / producer | State worker FPM dipakai ulang setelah producer fatal, eksekusi terjadi di request berikutnya |
| **Dork otomatis** | Multi-engine + pool per negara (ISO-3166 alpha-2) |
| **Filter negara** | `--country ID`, `SG`, `MY`, `TH`, `PH`, dst. |
| **Scan check** | Deteksi PHP EOL dan patch di bawah versi aman |
| **Bypass WAF/403** | 7 profil request + adaptive body sizing (default aktif) |
| **Oracle ranking** | Prioritas host dengan phpinfo / `display_errors` aktif |
| **Laporan** | `report.html` + ringkasan teks per run |
| **OS** | Linux / macOS / Windows (WSL) |
# unzip the package you received from the admin, then:
javac -d scan_check/build $(find scan_check/src -name '*.java')
java -cp scan_check/build harness.Main --fixtures
python3 scan_check/exploit/auto_exploiter.py --auto --version 8.1.34 --country ID --num-websites 8 --cmd id
java -cp scan_check/build harness.Main --url
java -cp scan_check/build harness.Main --dork 'php:8.1.34' --country ID --oracle --num-websites 10
python3 scan_check/exploit/php2shell_exploit.py --url --no-bypass
| **`VulnerablePhpVersionScanCheck`** | `scan_check/src/VulnerablePhpVersionScanCheck.java` | Logika deteksi versi PHP rentan (EOL / patch di bawah rilis aman), severity HIGH |
| **`Dorker`** | `scan_check/src/dork/Dorker.java` | Auto-dork multi-engine, filter negara (ccTLD + API), ranking oracle |
| **`Main`** | `scan_check/src/harness/Main.java` | CLI harness: `--url`, `--dork`, `--country`, `--oracle`, `--fixtures`, `--report` |
| **`Fixture`** | `scan_check/src/harness/Fixture.java` | 10 kasus uji header PHP, regresi cepat tanpa jaringan |
| **`auto_exploiter`** | `scan_check/exploit/auto_exploiter.py` | Pipeline: dork → verify → scan → exploit → report |
| **`php2shell_exploit`** | `scan_check/exploit/php2shell_exploit.py` | Primitif exploit: OOM flood, groom spray, consumer, probe, bypass WAF |
| **`oracle_hunt`** | `oracle_hunt.py` | Ranking host berdasarkan phpinfo / `display_errors` sebelum membuang percobaan |
├─ assets/ # logo + diagram
├─ src/ # Java: scan check, dork, harness, Montoya stubs
└─ exploit/ # Python: pipeline + exploit + WAF bypass
- **Admin** — [t.me/xiyyyyz]( — Kontak admin dan komunitas untuk pembelian, pembaruan, atau bantuan.
- **Komunitas** — [Inspector AI]( — Bergabung untuk diskusi, pembaruan, dan tips keamanan.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
