github.com / murrez
murrez/
Python·14 files·commit e625359·scanned 5d ago·cached ✓
6/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
Created 1 days ago
Created in the last 7 days
Research / educational context
threat-state: safelive
FINDINGS ░▒▓
CLEAN
No malicious patterns found across 6/14 content-scanned files.
Static analysis only — treat as “nothing found”, not a guarantee.
Static analysis only — treat as “nothing found”, not a guarantee.
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
6 files scanned @ e625359 | 10/23/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 6/14rules hit 0engine v7commit e625359
github
murrez/php2shell
PoC for CVE-2026-109618 / CVE-2026-109619 (php2shell): PHP session.upload_progress UAF. check = GET fingerprint + bulk JSONL; exploit = smart 618 (multi-path trigger) or 619 with --call. Stdlib only.
43
20
7d
14 files
6 scanned(43%)
e625359
architecture░▒▓
entry (0) flagged (0) pkg (19)
25 nodes · 32 edgesscroll to zoom · click node to jump to finding