Granville Vance Public Health
IT toolsPHP network inventory

GVPH PHP Scanner 1.8.0

A clearer view of
PHP on your network.

Find web interfaces, review PHP evidence, and plan the next update. Your scan runs on this computer.

01 / Choose your scope

Where should we look?

One per line or separated by commas. Examples: 192.168.1.0/24, 192.168.2.20, https://nas.internal:5001/

Website review: enter an explicit HTTP/HTTPS URL. Results include passive checks for cookie flags, browser security headers, HTTP resources and password forms. Use the public-address option for Internet sites. These checks do not confirm exploits.

A /24 scans .1–.254. Check your subnet mask.

Retries transient failures, compares response headers, checks common entry pages, and retries validated DNS hostnames for incomplete internal IP responses. May take longer. Turn this off for a standard scan.

Ports and scan settings
Presets replace the port list above. Add vendor-specific ports as needed (up to 32).

Standard and Faster check up to 4 ports per target at once. Gentle checks one port at a time. Shorter timeouts may miss slow devices; the standard timeout remains 3 seconds.

Explicit URLs stay on their own port. Other hostnames, query strings, device-action paths and HTTPS downgrades are skipped. No credentials or cookies are sent.

Useful for appliances. Those results will say that device identity was not verified. No credentials are sent.

Nothing is scanned until you review and confirm.

Review your scan

Ordinary unauthenticated web requests only. Devices may log requests or create an anonymous session. Only the selected ports are assessed. The settings above state whether limited same-host redirects are followed.