openai/php2shell-checker

This page introduces an external open-source repository. It is not an HDATF product.

What it does

PHP Version Checker helps website operators identify PHP versions that fall within the repository's php2shell vulnerability ranges. It accepts a website URL or a local PHP executable as input. The URL path reads Server and X-Powered-By response headers, while the local path reads the executable's version output. It compares the extracted version against an embedded table of vulnerable patch cutoffs for each listed branch. Results are OK, VULNERABLE, or UNKNOWN, with JSON output and exit codes available for automation. The repository also provides separate agent instructions for URL-only checks and checks with server access. Direct use requires Node.js, and checking the actual serving build requires access to the relevant server installation. It neither follows redirects nor inspects response bodies, and hidden headers, modified banners, vendor backports, and a different command-line PHP installation can make the result incomplete or misleading.

License

Apache-2.0 Permissive, with a patent grant. Commercial use is allowed; keep the notices and state your changes.

More in this category

• Check-Risk-WAF/Check-Risk-WAF
  This repository presents the Check Risk WAF product and its interface assets for inspecting requests before they reach websites and APIs. The public tree centers on a README and images; it was not confirmed as an open firewall-engine source library. Intended users are web-service operators, with HTTP and HTTPS requests and administrator policies as inputs. The product description says a reverse proxy checks requests, forwards allowed traffic to the original application and logs blocking reasons and rules. Its panel configures web-attack filtering, bot checks, request-rate limits and attack-event analysis. An AI feature explains a selected incident and proposes exceptions, but this does not certify detection accuracy. On-premise installation requires an Ubuntu Server 24.04 LTS x86_64 host and an external distribution package, while cloud setup requires registering the domain and upstream and rerouting traffic. Downloading the repository does not enable protection; TLS certificates, upstream routing and real-client-IP forwarding need separate configuration. Deployment variants differ in features and terms, so review commercial-use conditions, data handling and false blocking of legitimate requests.
• hcliucs/APSD
  APSD is the official dataset repository for a 2024 paper in IEEE Transactions on Information Forensics and Security (TIFS). The paper is titled "Stealthiness Assessment of Adversarial Perturbation: From a Visual Perspective". An adversarial perturbation is a small change added to an image to mislead a classifier, and this work studies how visible that change is to people. Its starting point is that metrics such as Lp norms, PSNR and SSIM can disagree with human perception. The dataset holds 10,586 image pairs made from 400 reference images with 12 attack methods in five families, such as FGSM, PGD, CW, AdvGAN and Square. Of 60 observers, 15 rated each adversarial example in two steps, first sorting how visible the change is and then scoring it in detail, and the mean opinion score (MOS) from 0 to 1 is the label. The README also describes A2SM, an attention-based model that predicts these scores, and reports 0.984 PLCC and 0.978 SROCC on APSD. The repository has only four files, the README, two figures and a Google Drive link file, with no attack code and no A2SM model code. The data comes from that Drive link, and the README says the exact folder and file names follow the actual package, so its example tree may differ. The license is still to be decided (TBD), and the README says that if the dataset contains images from ImageNet, COCO or VOC2012, their original terms also apply.
• scrapfly/Antibot-Detector
  A Chrome extension that detects anti-bot systems, CAPTCHAs and browser fingerprinting. It analyzes page elements, network requests and browser APIs, and displays detection results and history.
• OffGridPete/Fieldwatch
  A receive only Wi-Fi and Bluetooth LE observer for Android. The author describes it as passive, listening only, with no dongle, no account and no backend server, built to work offline in the field. It offers a filtering engine, an extensible signature library for identifying radio sources, and reports of what was seen, and everything stays on the phone.
• ThinkWatchProject/ThinkWatch-Lite
  A local gateway placed in front of Claude Code, Codex and other AI clients on macOS, Windows and Linux. Each client is pointed at the gateway once, after which upstreams and models change without touching client configuration. Every request is recorded with its cost and route, API keys and other secrets can be replaced before a request leaves the machine, and a dangerous tool call that a relay slips into an answer can be cut off before the client runs it.

Only repositories in the ranked Trendshift lists are included, and the lists are used only to find candidates. We do not copy their ranks. Descriptions, licenses and star counts come from each GitHub repository. The notes are our own reading. We have not tested these projects, and a place on a trending list does not prove quality.