Ffile2fix
Sign in Get started
← All tools

PHP Webshell Detector

Scan a PHP file or ZIP project for common webshell indicators and suspicious execution patterns without running the uploaded code.

Free to use

Scan without executing

Upload one PHP/source file or a ZIP project. The scanner reads bounded text only; it never includes, runs, or serves uploaded code.

  • Input up to 20 MiB
  • ZIP: up to 2,000 entries, 2 MiB per file, and 20 MiB of source read
  • Heuristic only: findings need expert review and a clean result is not proof of safety

Findings

Upload a source file or project archive to see findings.

About PHP Webshell Detector

Scan a PHP file or ZIP project for common webshell indicators and suspicious execution patterns without running the uploaded code.

How to use this tool

  1. Enter the requested data or choose an upload.
  2. Check the file type and size limit before submitting.
  3. Review the result, then download or copy it.
  4. Keep the original and use the actions above to continue safely.

Read the full PHP Webshell Detector guide →