versionscan - A PHP version scanner for reporting possible vulne

项目说明

===========

![Build Status]()
![Total Downloads]()

is a tool for e your currently installed PHP
and checking it against known CVEs and the they were fixed in
to report back potential issues.

PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixes. As of right now, this only reports back for the straight up reported.

Installation
------------

Using Composer

The only current dependency is the Symfony console.

Usage
------------

To run the scan against your current PHP , use:

bin/

The script will check the PHP_ for the current instance and
generate the pass/fail results. The output looks similar to:

Results will be reported back colorized as well to easily show the pass/fail
of the check.

Parameters
------------

There are several parameters that can be given to the tool to configure its scans and results:

PHP

If you'd like to define a PHP to check other than the one the script finds itself, you can use the php- parameter:

Report Only Failures

You can also tell the to only report back the failures and not the passing tests:

Sorting results

You can also sort the results either by the CVE ID or by se (risk rating), with the sort parameter
and either the "cve" or "risk" value:

Output formats

By default ** will output information directly to the console in a human-readable result. You can also specify other output formats that may be easier to parse programatically (like JSON). Use the --format option to change the output:

Supported output formats are console, json, xml and html.

The HTML output format requires an --output option of the directory to write the file:

The result will be written to a file named something like 808.html

项目信息

开发语言：PHP

Star 数：248

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A PHP version scanner for reporting possible vulnerabilities展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。