r/selfhosted

9h ago

u/jonmchan

Docker Container php2shell audit script

Self Help

Here's a quick script to check if you have a vulnerable version of php running on any of your docker containers.

$ sudo ./audit.sh

=== Starting Docker PHP2Shell Audit ===

[SAFE] Container: kimai-kimai-1 is running patched PHP v8.3.36. [VULNERABLE] Container: nextcloud-nextcloud-aio-nextcloud-1 (PHP v8.3.19) is vulnerable to PHP2Shell! [VULNERABLE] Container: wildcard-web (PHP v8.3.31) is vulnerable to PHP2Shell! [VULNERABLE] Container: root-web (PHP v8.3.31) is vulnerable to PHP2Shell! [VULNERABLE] Container: home-web (PHP v8.4.16) is vulnerable to PHP2Shell!…