Insignary Launches Free Insignary‑Chk Scanner to Spot PHP2Shell and Node2Shell Webshell Exposure
What Happened — Insignary, a security‑automation startup, announced a free, open‑source utility called Insignary‑Chk that scans web‑application servers for the presence of PHP2Shell and Node2Shell webshells. These malicious scripts are often dropped after an attacker exploits a vulnerable PHP or Node.js application and can provide persistent back‑door access. The tool uses known file signatures, permission heuristics, and command‑execution patterns to locate hidden webshells. It can be run locally, scripted into CI/CD pipelines, or integrated with existing host‑hardening processes. The release was reported by HackRead and the source code is hosted publicly on GitHub.
Why It Matters for Trust & Control Assurance — Detecting hidden webshells satisfies the control‑area of continuous monitoring for unauthorized code, a core evidence point for many audit frameworks.
Who Is Affected — SaaS providers, e‑commerce platforms, and any organization that runs PHP or Node.js web services.
Recommended Actions — Deploy Insignary‑Chk in regular host‑hardening scans or CI/CD pipelines; map any detections to your “unauthorized software” control; retain logs as defensible audit evidence. Source: HackRead
Technical Notes — The scanner looks for known PHP2Shell/Node2Shell file signatures, suspicious file permissions, and typical command‑execution patterns. No specific CVE is cited; the exposure originates from prior vulnerabilities that allow webshell upload. Source: same