Since I have to go through a bunch of php repos today at work I ended up releasing a CLI tool that automates that process by listing out the steps you need to take to stay away from the vulnerability. Here's the link incase it helps anyone https://github.com/Amsozzer1/php2shell-repo-audit

▲

trollbridge 4 hours ago | parent [-]

Dude, today of all days is not when I'm going to trust some random CLI tool that was vibed out. I'm not saying your work isn't helpful, but it would probably be a lot better to just release your prompts you used to build this and let others build it on their own.

▲

Trufa 4 hours ago | parent | next [-]

I really like the idea of sharing details prompts/specs.

It feels like many times PRs could just be that.

	▲	trollbridge an hour ago \| parent [-]
		People would be embarrassed of their prompts or they'd be trivially simple.

▲

Amsozzer 4 hours ago | parent | prev [-]

makes sense, will release the docs. thanks!

	▲	rob 4 hours ago \| parent [-]
		I wouldn't listen to him. This is very helpful to people that might be managing dozens or hundreds of servers and need a way to quickly figure out things. It's literally open source and we can point our agent to it and have it examine the source code for anything that looks suspicious first. No need to sit here for a couple hours trying to go back and forth and create something that you already took the time to do. Thanks for the work!