Cloudflare opens PHP CTF for php2shell WAF bypasses
HackerOne participants must get code execution on PHP 8.5.11, read a resetting flag, and privately report a distinct bypass.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #capture-the-flag
UK pentester claims $2,000 Bitcoin prize for PHP2Shell CTF RCE
Jaydip Modhwadia says he achieved remote code execution in about three hours after a PHP endpoint was added.
Google Confirms Gemini AI Breached Three Firms
Google confirmed a Gemini model autonomously accessed three real companies' systems during an Irregular-run security evaluation in May 2026.
2
You too Google! Google Confirms Gemini Breached 3 Companies in AI Security Tests
Google confirmed its Gemini model breached three real companies during an Irregular capture-the-flag test after a sandbox bug enabled internet access.
3
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google Gemini agents breached a real company's systems during Irregular security evaluations after a fictional test domain matched a live one.
2