I will audit your web server for php2shell cves and deliver a hardening pack

United Kingdom

I speak English

Cybersecurity and Compliance Engineer

Independent UK Security & Compliance Engineering Lab (faultypacket.co.uk). We deliver 100% asynchronous, zero-call technical compliance audits and remediation packs for UK/EU/Global businesses—coverin...

About this Gig

Need to verify your PHP-FPM, Nginx, Apache, or IIS servers against PHP2Shell (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560) and lock down Grade A+ HTTP security headers without handing over SSH keys?

What You Get in 24 Hours (100% Async - Zero Server Credentials Needed):

1. External Non-Intrusive Exposure Audit: We inspect your public endpoints for exposed PHP version banners (expose_php), CGI/FastCGI query-string parameter handling risks, server signature leaks (ServerTokens), TLS configuration, and missing OWASP headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

2. Copy-Paste Server Lockdown Configs: Ready-to-drop production configs for php.ini (expose_php=Off, cgi.force_redirect=1, cgi.fix_pathinfo=0, hardened disable_functions), Nginx (fastcgi_split_path_info, header stripping), Apache, IIS, and Cloudflare WAF rules.

3. Local Triage & Verification Scripts: Run our zero-telemetry php2shell_local_triage.sh script on your own host to scan access logs for exploitation IOCs and verify your fix offline with faultypacket_uk_auditor.py.