php situation 24h later

LiveOverflow
176,469 views •

Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped me get remote code execution against PHP/Apache and WordPress. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy RESOURCES Previous video, The race to the first exploit // php2shell: https://www.youtube.com/watch?v=7CiZmq2llDg php2shell write-up: https://calif.io/php2shell/ Elias Taylor's post on exploit complexity: https://eliastaylor.com/noexploit/ Low Level's coverage: https://www.youtube.com/watch?v=QRABrn606LE CHAPTERS 00:00 - php2shell 24 hours later 00:40 - Is the php2shell fix incomplete? 02:41 - How the PHP patch works 03:49 - Is php2shell really hard to exploit? 07:04 - AI exploit development methodology 09:01 - Exploiting PHP/Apache and WordPress SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #PHP2SHELL #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.

Keyboard shortcuts

On. Switch them off if they collide with your assistive tools; ? still opens this sheet.

Go to

Press g then the letter.

  • gh Latest
  • gs Sources
  • gm Media
  • gv Videos
  • gp Podcasts
  • gc Calendar
  • gd Decoder
  • gz Dataviz
  • ga Datasets
  • gb Blog
  • gk Markets
  • gj Careers
  • gn Prompt Notebook

On this page

  • / Focus search, where there is one
  • t Back to top
  • ? This list
  • Esc Close