php situation 24h later
Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped me get remote code execution against PHP/Apache and WordPress. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy RESOURCES Previous video, The race to the first exploit // php2shell: https://www.youtube.com/watch?v=7CiZmq2llDg php2shell write-up: https://calif.io/php2shell/ Elias Taylor's post on exploit complexity: https://eliastaylor.com/noexploit/ Low Level's coverage: https://www.youtube.com/watch?v=QRABrn606LE CHAPTERS 00:00 - php2shell 24 hours later 00:40 - Is the php2shell fix incomplete? 02:41 - How the PHP patch works 03:49 - Is php2shell really hard to exploit? 07:04 - AI exploit development methodology 09:01 - Exploiting PHP/Apache and WordPress SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #PHP2SHELL #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.