UK pentester claims $2,000 Bitcoin prize for PHP2Shell CTF RCE
Jaydip Modhwadia says he achieved remote code execution in about three hours after a PHP endpoint was added.
Stories per day · 30 days
Relatedphp6php2shell6remote-code-execution3mirai2rce2botnet1capture-the-flag1denial-of-service1f51heap-overflow1nginx1poc1potassium1session-upload-progress1vulncheck1
8 stories, newest first · one card per story
Stories tagged #aslr
Public PoC exploits PHP2Shell for RCE on PHP 8.4.26
The PoC is tuned for Alpine PHP 8.4.26 and succeeded in seven of ten lab runs.
SANS finds published php2shell exploits unreliable outside lab setups
Working demos need an 8 MB memory limit, one prefork worker and on-box library offsets, and commands are capped at 14 bytes.
Mirai operators attempt PHP2Shell attacks; no confirmed compromises
PHP fixed CVE-2026-109618 and CVE-2026-109619 on October 21; firms say attempts have not produced a confirmed breach.
PHP2Shell exploit attempts rise, but experts doubt they succeed
Amazon and others report scans since October 17, while researchers say public PoCs fail on typical PHP setups.
VulnCheck exploit bypasses ASLR for PHP2Shell remote code execution
The private exploit chains a memory leak into RCE on PHP 8.4.26 with ASLR on and display_errors off.
F5 ships emergency patches for three critical NGINX flaws
All three CVEs score 9.2; F5 says it has found no evidence of exploitation and urges upgrades.
Re: Retrospective by 'gpg.fail' authors
GPG exploitation talk author clarifies a format-string 0day enabling code execution via printf %n writes and a polyglot PEM certificate payload.