php situation 24h later
MentionsApache Software FoundationWordPress
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped me get remote code execution against PHP/Apache and WordPress. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy RESOURCES Previous video, The race to the first exploit // php2shell: https://www.youtube.com/watch?v=7CiZmq2llDg php2shell write-up: https://calif.io/php2shell/ Elias Taylor's post on exploit complexity: https://eliastaylor.com/noexploit/ Low Level's…
Description from LiveOverflow.
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- TechnologyPHPA programming language that powers a large share of websites, including WordPress.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.