PHP2Shell Emergency Check (authorized engagements)

Scope

Rapid assessment of a PHP estate during the PHP2Shell event: exposure verdict → compromise verdict → emergency mitigation → patch verification, delivered as an evidence-based report within the same day. Default shape: WordPress or Bitrix (or custom PHP) on a VPS or shared hosting, nginx/Apache + PHP-FPM. Written ROE before any active check; everything here is read-only + log/file inspection by default. Exploit validation runs ONLY in the isolated lab (see Lab use below), never on client infrastructure.

Event snapshot — 2026-10-21 (mutable, refresh at delivery time)