PHP CGI Scanner

Screenshot

Overview

PHP CGI Scanner is a Python 3 utility designed to help identify systems potentially exposed to CVE-2024-4577.
It checks for visible PHP versions, common CGI endpoints, and phpinfo outputs to provide a quick risk assessment.

Disclaimer: This tool is for authorized security testing only. Use responsibly.

Features

• Detects PHP version from headers and phpinfo output.
• Scans for common PHP-CGI endpoints.
• Classifies server API (CGI, FPM, module).
• Provides clear verdicts (SAFE, POTENTIALLY VULNERABLE, INCONCLUSIVE).
• Optional colorized output and ASCII banners.

Requirements

• Python 3.6+
• requests
• colorama (optional)
• pyfiglet (optional)

Installation

Clone the repository and install dependencies:

git clone https://github.com/yourusername/PHPCGIScanner.git
cd PHPCGIScanner
pip install -r requirements.txt

Usage

Basic Scan

python3 PHPCGIScanner.py <target>

Example:

python3 PHPCGIScanner.py http://example.com

With phpinfo URL

python3 PHPCGIScanner.py <target> --phpinfo-url http://example.com/phpinfo.php

Ignore TLS Warnings

python3 PHPCGIScanner.py <target> --insecure

Exit Codes

• 0 -- SAFE / Not vulnerable
• 1 -- POTENTIALLY VULNERABLE (needs review)
• 2 -- UNKNOWN / Error

Notes

• Vulnerable PHP versions checked:
  • 8.3.0--8.3.7
  • 8.2.0--8.2.19
  • 8.1.0--8.1.28
• Designed for security engineers and penetration testers with permission.

License

MIT License. See LICENSE file for details.