phpcheck-server
Check PHP2Shell patch status with local or server access. Use when you have shell/server access to verify the PHP version actually serving a site (php -v vs the PHP-FPM / Apache build), including vendor backports — never runs exploit probes.
- License 许可
- MIT
- 最近更新
- 2026-11-07
- Stars
- ★ 0
- Forks
- 1
01 前言 Front Matter
- name
- phpcheck-server
- description
- Check PHP2Shell patch status with local or server access. Use when you have shell/server access to verify the PHP version actually serving a site (php -v vs the PHP-FPM / Apache build), including vendor backports — never runs exploit probes.
03 SKILL.md 正文
Nguồn / bản jarvis: bóc nguyên văn từ openai/php2shell-checker @
40a4746(Apache-2.0) — xemATTRIBUTION.md. Chỉ mở rộng dòngdescriptionở frontmatter và thêm ghi chú chạy script ngay dưới đây; bảng vulnerable-range giữ nguyên văn.Ghi chú jarvis: bản cài kèm script của skill
phpcheck-urlcũng chạy được ở chế độ local trên chính server:node ../phpcheck-url/scripts/phpcheck.js --local --json(exit 0 = OK, 1 = VULNERABLE, 3 = UNKNOWN). Khi chưa có quyền server mà chỉ có URL: dùng trước skillphpcheck-url— mục "Mở rộng jarvis" trong đó moi bằng chứng từ kênh công khai (fingerprint CMS, file lộ phiên bản, phpinfo) trước khi kết luận unknown; bảng vulnerable-range của skill này là bảng đối chiếu chung cho cả hai.
Check the PHP version serving the site. Start with php -v, but verify that
it matches the site's PHP-FPM or Apache installation.
Vulnerable ranges used by the checker as of October 20, 2026:
| PHP branch | Vulnerable range (inclusive) |
|---|---|
| 5.4 | 5.4.0 to 5.4.45 |
| 5.5 | 5.5.0 to 5.5.38 |
| 5.6 | 5.6.0 to 5.6.40 |
| 7.0 | 7.0.0 to 7.0.33 |
| 7.1 | 7.1.0 to 7.1.33 |
| 7.2 | 7.2.0 to 7.2.34 |
| 7.3 | 7.3.0 to 7.3.33 |
| 7.4 | 7.4.0 to 7.4.33 |
| 8.0 | 8.0.0 to 8.0.30 |
| 8.1 | 8.1.0 to 8.1.34 |
| 8.2 | 8.2.0 to 8.2.34 |
| 8.3 | 8.3.0 to 8.3.35 |
| 8.4 | 8.4.0 to 8.4.26 |
| 8.5 | 8.5.0 to 8.5.11 |
Compare the version and full package revision with current PHP or vendor security advisories. Vendor backports may fix an older version. Treat unlisted branches as unknown until an advisory confirms their status.
The running PHP build and the vendor's package advisory are the useful checks. Configuration settings alone do not establish that PHP is patched. Report the version, patch status, and any required update. If you cannot verify the serving version, report unknown. Do not run exploit probes.
04 同仓库更多 Skills
web-scrape
Turn web pages into LLM-ready markdown via the Firecrawl API (renders JS, anti-bot handling). Use when browser_open/fetch fails on JS-heavy pages, or when you need clean markdown/structured extraction from a site. Requires FIRECRAWL_API_KEY.
design-taste-frontend
tasteskill v2, the anti-slop frontend skill. Art direction for websites, distilled from a study of 247 curated gallery sites (One Page Love, Awwwards Sites of the Day). Deals researched directions (idea, composition, type, palette, photographs, section blueprints) from a library, enforces a strict no-slop house style with a real-browser inspector, and runs a look-and-fix loop on screenshots. Use this whenever you build, design, redesign, restyle, polish or review a landing page, marketing site, portfolio, product page, one-pager, hero or any public-facing web page, in any stack (HTML/CSS, React, Next.js, Vue, Svelte, Astro, Tailwind) — also when the user says a page looks generic, templated, "AI-made", sloppy, or asks to make it look designed, premium, award-level or less like every other site. Not for dashboards or app screens.
test-driven-development
Use when implementing any feature or bugfix, before writing implementation code
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
requesting-code-review
Use when completing tasks, implementing major features, or before merging to verify work meets requirements
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).