mcpField
P
phpcheck-url

phpcheck-url

github.com/openaiSecurity1.4k60 installsUpdated 6d ago
Repository

About phpcheck-url

phpcheck-url is a skill for checking a website’s PHP version through response headers and comparing it with security guidance. It suits site operators reviewing exposed version information; hidden versions are reported as unknown.

Key features

  1. 01Read Server and X-Powered-By headers
  2. 02Check a URL with a Node.js script
  3. 03Report hidden versions as unknown
  4. 04Avoid exploit probes

Use cases

  1. 01Review a site's exposed PHP version
  2. 02Flag version information for follow-up
  3. 03Distinguish unknown results from execution failures

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/openai/php2shell-checker --skill phpcheck-url

After installing, type/phpcheck-urlin Claude Code to confirm it loaded.

Bundled filesscripts/phpcheck.js

Details

From the project README

From this skill's directory, run:

node scripts/phpcheck.js "https://example.com" --json

Use HTTPS for a bare hostname. The checker reads Server and X-Powered-By headers. If the version is hidden, report unknown.

Compare the reported version with current PHP security guidance. Headers can be changed and vendor backports may fix an older version, so a server-side version and package check is stronger evidence. Do not run exploit probes.

Exit codes 1 and 3 mean vulnerable and unknown, not execution failures.

Comments

Markdown supported