Rule Info
Name
HKTL_PHP2SHELL_Exploit_Aslr_Bypass_Oct26
Author
Jonathan Peters (cod3nym)
Description
Detects PHP2SHELL exploitation scripts
Score
80
Date
2026-10-22
Minimum Yara
3.5.0
Rule Hash
dcf39f768d9fc3d6ecceb8b85ba1807a
Tags
['HKTL', 'EXPLOIT']
Required Modules
[]
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
3
Clean (0 engines)
20
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR