Fortirix/ Research

Fortirix Research

Notes from the outside‑in.

Research on the internet-facing attack surface — measured passively, from the outside, and reported with the caveats a careful reader deserves.

· threat-intel · php · attack-surface

PHP2Shell: What Fortirix's External PHP Inventory Reveals

In scans taken almost entirely before the PHP2Shell patch, 9,912 internet-facing hostnames across 172 root domains we monitor advertised a PHP version in the affected range: 99.3% of all the PHP we see. Here is the breakdown, and what a version header can and can't tell you.

Read the research →