WordPressでサイトを運営してる人は、これで確認してみるとよさそう👀
WordPressの裏側で動く「PHP」のセキュリティ問題について、OpenAIが確認用のCodexスキルを公開
使っているPHPのバージョンから、対応が必要か調べる手がかりになる
※これだけでサイト全体の安全が保証されるわけではありません
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
自社サイトがPHPの脆弱性の影響を受けるか、Codexで確認を進める手順が公開されました。URLだけで調べる方法もありますが、PHPの版が見えなければ結果は「不明」に。「OK」も修正済みの保証ではないそうで、判定の意味まで一緒に読んでおきたいです。
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
Codex
Github
リポジトリ
リポビタン
オロナミン
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
If you use AI for "safety", at least do it with some due diligence. This checker is not accurate and will report false positives.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
🧯 The PHP bugs every host is patching this week came out of an AI-assisted hunt, and @OpenAI shipped a free checker with the disclosure.
• Two critical flaws, nicknamed php2shell, let an unauthenticated request run code on a PHP server
• Calif found one with GPT-5.6 Sol, and Wiz independently reported both
• Fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, with no official release for 8.1 and older
• Catch: the checker only reads the version a server reports, so a hidden header comes back unknown, not safe
Run it on every server that still speaks PHP, then patch before reading the hot takes.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
I fully expect a supply chain attack exploit update related to this 🤧
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
This is pretty handy
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
If your site runs PHP, this is worth 5 minutes today.
CISA says patch now: 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
On 8.1 or older? CISA says take it offline until it's updated.
AI found the bug. Now an AI skill checks if you're hit.
Is your site on PHP?
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
İnanılmaz gelişmeler oluyor güvenlik ve yapay zeka alanında
İlk olarak OpenAI araçları ile PHP de kritik güvenlik açığı bulundu ve bu dünya çapındaki AI sonrası en önemli bulunan açıktı ama hackerlardan önce güvenlikçiler bunu buldu ve yama yayınlanınca herkesin haberi oldu doğal olarak
Tamda burada ; AI ların en gelişmiş modellerini halka açmamalarının haklı olduğu ortaya çıktı
Şimdi ise OpenAi diyorki : chatGpt kullqnarak web sitenizin son güvenlik açığına sahip olup olmadığını gorebileceginiz bir eklenti yayınladık
Yani tüm datayıda toplayacaklar, hangi site etkilendi, hangi site kendini nasıl düzeltti, gerçekten duzeltti mi?
Tarihin en büyük ve kıymetli datalarına AI lar sahip oluyor
Bu dataları para ile almak bile mümkün olmayacak
Hararinin dedigi gibi : Dataya sahip olanlar yönetecek , diğerleri yönetilecek
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
以防你还不知道。
OpenAI 放出了可以检查最近一天内爆出的PHP 漏洞的技能包，如果你的项目用PHP 写的。不放用它试试
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
自社サイトが危険に晒されていないか、OpenAIのCodexに直接チェックさせるという新しい使い方が登場。
——OpenAI公式が、PHPの脆弱性診断を自動化するCodexスキルをGitHubで公開した。
以下、解説
＝＝＝↓↓↓
【概要】
公開されたのは「php2shell-checker」というリポジトリ。名前が示す通り、PHPの脆弱性を悪用してリモートからシェル（コード実行権限）を奪われるリスクがあるかどうかを診断するためのツール群。
【Codex Skillとは】
AnthropicのClaude Skillsと同様、OpenAIのコーディングエージェントCodexにタスク固有の「手順書」を読み込ませる仕組み。今回はこのスキルを使い、Codexが自動でサイトのコードを解析し、脆弱なパターンを検出してくれる。
【使い方】
1. 対象リポジトリをクローン
2. Codexにこのリポジトリを指し示す（point）
3. Codexがガイドに沿って診断プロセスを実行
開発者自身が脆弱性の知識を細かく持っていなくても、Codexが代わりに診断・判断を行ってくれる点がポイント。セキュリティ診断の民主化という意味でも注目に値する動き。
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
A one-command check for whether my site is affected by PHP2Shell is the kind of security tooling I actually use. I have skipped too many 'read the 40-page advisory' workflows. If the skill tells me I am clean in 30 seconds, I will run it today.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
Packaging CVE triage directly into runnable model skills is a fantastic distribution pattern.
Instead of parsing a static security advisory, developers get instant verification against their own repo. This shrinks the patch window from days to minutes.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI が php2shell-checker というスキルを公開してくれているので、未だ不安が残っている方は使いましょう.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
This is cool to see
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
神✨️
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
clear message...
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
"panic!!!" "Oh don't worry, we have a fix, aren't we great...." 🙄
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
Academics only.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
Shipping the fix as a skill people can point their agent at is smart. Most sites running old PHP have no security team, they have one person and now a Codex.
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…