9bie/php2shell-bypass-aslr-exp
View on GitHub ↗ ★ 1,568 Python
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
5 mentions on Hacker News by 2 people: 0 stories, 5 comments · first 2026-10-22 · latest 2026-10-25
20082026
-
Interesting, can you give some more info? The best path forward I found was using https://github.com/9bie/php2shell-bypass-aslr-exp and figuring out how to shrink the B1 leak down to >1.21MiB
comment by leszczy · 2026-10-25 · in Show HN: Steal My Bitcoin -
…your comment the difficult part a random AI prompt was unlikely to find already dropped on github https://github.com/9bie/php2shell-bypass-aslr-exp
comment by athrowaway3z · 2026-10-23 · in There isn't an easy exploit for this PHP vulnerability -
…PoC on github was posted that did the 'hard part' that a random AI prompt was unlikely to find. https://github.com/9bie/php2shell-bypass-aslr-exp
comment by athrowaway3z · 2026-10-22 · in Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure -
https://github.com/9bie/php2shell-bypass-aslr-exp is the real deal.
comment by athrowaway3z · 2026-10-22 · in There isn't an easy exploit for this PHP vulnerability -
https://github.com/9bie/php2shell-bypass-aslr-exp Buy 5$ on deepseek and have it write a script to grind out the right offsets to use for the most popular docker images. I got it working just now; shell on any docker image i pull. GG this…
comment by athrowaway3z · 2026-10-22 · in There isn't an easy exploit for this PHP vulnerability