OPEN LINK ↗
// 1h agoOPENSOURCE RELEASE
Codex Ships PHP Version Checker Skill
OpenAI released an open-source Codex skill that checks websites or local servers for potentially vulnerable PHP versions tied to the PHP2Shell flaws. It uses version headers or local PHP metadata without sending exploit requests.
// ANALYSIS
This is a useful defensive utility, but its narrow scope matters: it identifies risky PHP versions, not application-level vulnerabilities.
- –Includes separate URL-only and server-access skills for checking exposed or local PHP versions
- –Compares detected versions against vulnerable branch cutoffs and returns machine-readable results
- –Avoids exploit probes, making it safer for routine production checks
- –Hidden headers produce UNKNOWN, while vendor backports can make version-only conclusions incomplete
- –The Apache-licensed, dependency-free Node.js checker is easy to integrate into developer and security workflows
// TAGS
php2shell-checkersecuritydevtoolcliopen-sourcecoding-agentautomation
DISCOVERED
1h ago
2026-10-21
PUBLISHED
2h ago
2026-10-21
RELEVANCE
8/ 10
AUTHOR
mark_k