EXP IP Scanner 1.4.3

PHP is visible where you already work.

Version 1.4.3 brings the passive PHP fingerprint into the main device table. After Security identifies PHP, you can see the runtime beside the device’s normal services without opening every device drawer.

PHP joins the Services column

A disclosed runtime appears as PHP X.Y.Z. When PHP is positively identified but its version is hidden, the chip reads simply PHP. No version is guessed.

No fake port numbers

PHP is a detected runtime, not a listening port. EXP IP Scanner keeps the real open-port list untouched and adds the PHP chip from passive HTTP/HTTPS fingerprint evidence.

Designed for fast triage

The PHP chip reserves a visible position even when a host has many open services, making it easier to spot systems worth reviewing during a network-wide PHP2Shell security pass.

Still passive

The Security pass continues to use ordinary HTTP and HTTPS response metadata. It does not try credentials, send exploit payloads, or execute code.