Free PHP2Shell response resources for MSPs. Help your team discover customer dependencies, coordinate remediation, verify the active PHP runtime, and document what remains open.
Version 1.0 · Published October 21, 2026 · No signup required
Choose the complete toolkit or download the editable playbook on its own.
The playbook and companion working files in one download, ready to support a coordinated response across customers and third-party providers.
Version 1.0 · Includes the playbook below.
An editable, unbranded operational reference for response leads and technicians managing PHP2Shell exposure and remediation.
Version 1.0 · Adapt it to your team's workflow.
Using these resources: This is a dated operational reference. Check current PHP and vendor advisories before each use. Review discovery scripts before running them in an authorized environment. Patch verification and compromise review are separate parts of the response.
Bob Miller and Chris Loehr explore epistemic security, information integrity, cognitive security, and resilience. Follow the show for more conversations about cybersecurity and the decisions behind an effective response.