PHP2Shell: how to check whether a server is exposed, without trying to break into it
Many organizations do not know which PHP versions their servers run. A non-intrusive check that compares the version a server reports with the patched versions can give an initial picture. Moshe Levi of Levinity Cyber explains what it reveals, and what it does not.