엔키화이트햇, 'PHP2Shell' 진단 스캐너 무상 공개 < IT‧게임 < 기사본문 - 디일렉(THE ELEC)

엔키화이트햇, 'PHP2Shell' 진단 스캐너 무상 공개 < IT‧게임 < 기사본문 - 디일렉(THE ELEC)

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page kr/news/thelec/news-articleview-html, snapshot 20261025T144008Z. Copied byte for byte; every file's sha256 is in captures/20261025T144008Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

The Elec (Korean), 23 October, by Seong Ji-on: Enki WhiteHat is offering free a diagnostic scanner for PHP2Shell that gives a first judgement of whether the flaws are present. It checks only the PHP version and related settings, without attack code, by entering a URL with no login, and companies that do not use its Offen ASM product can also use it. It says, per Enki WhiteHat, all unpatched versions from PHP 5.4 to 8.5.11 are affected, and describes the analysis report published with it (causes of both flaws, affected systems and versions, immediate mitigations, how to apply the official patch). Same announcement as the Electronic Times item (etnews-20261023000089); noted as material only: the vault does not run such tools.

> 스캐너는 실제 공격 코드를 쓰지 않고 PHP 버전과 관련 설정만 확인해 위험 여부를 판별한다.

_Curator's translation:_ "The scanner does not use actual attack code; it determines risk by checking only the PHP version and related settings."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "엔키화이트햇, 'PHP2Shell' 진단 스캐너 무상 공개 < IT‧게임 < 기사본문 - 디일렉(THE ELEC)". Selected mechanically, not read by a person.

Capture notes

Language ko. The footer carries a copyright line ('무단전재 및 재배포, AI학습 및 활용 금지': no reproduction, redistribution, or AI training or use). It is a rights notice, not an instruction to act; recorded here and flagged to the editor. Nothing else addresses an AI or hides text from a reader.