Check for php2shell in one minute — free
Enter a URL to check for PHP and estimate its version using only publicly visible signals. No exploitation is attempted.
Checking0%
Preparing the check…
Progress reflects completed processing steps, not time remaining.
PHP in use
Estimated version
Fixed-release baseline
Signals found
Version comparison baseline: PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12. Distribution backport patches and the actual SAPI and worker state must be verified internally. Official fixed release ↗
This result is an estimate based only on headers and response characteristics visible from outside. We do not view source code or attempt exploitation. Results may differ for servers that hide version headers, servers behind proxies, or servers whose PHP differs by virtual host. "No exposure" does not mean safe.
External signals only
Checks only publicly visible information such as response headers and cookies.
No exploitation
Does not actually trigger the vulnerability or execute code.
One host only
PHP in internal networks, containers, or embedded devices must be audited from the inside.
Responsibility for useUse this tool only on systems you own or are authorized to test. You are responsible for your use of the tool and its results.