brotli2scan
HTTP2Shell (Brotli)
Memory corruption in the Brotli decompressor. Hits Node.js, Python, .NET, Envoy and more.
Probably not. Let's check.
When a serious web vulnerability hits the news, pick it below, enter your website and get a plain answer in seconds. Free, no account, nothing to install.
Runs every scanner below at the same time.
brotli2scan
Memory corruption in the Brotli decompressor. Hits Node.js, Python, .NET, Envoy and more.
php2scan
Remote code execution in PHP itself. Hits WordPress, Joomla, Nextcloud and every other PHP site.
plex2scan
CVE-2026-96652, -96654, -96655 and -96656
Four chained flaws that take over Plex Media Server without a login. Exploited to plant cryptominers.
Each one has its own scanner, built for exactly that problem.
The scanner loads your start page once, the same way a browser does.
Affected, patched, or not visible from outside, plus what to do next.