LiveOverflow: php situation 24h later

Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped me get remote code execution against PHP/Apache and WordPress.



LEARN ON HEXTREE (ad)

Learn hacking on Hextree: https://www.hextree.io/

Join the Hextree Discord: https://discord.gg/xgQpCQCpvy



RESOURCES

Previous video, The race to the first exploit // php2shell: https://www.youtube.com/watch?v=7CiZmq2llDg

php2shell write-up: https://calif.io/php2shell/

Elias Taylor's post on exploit complexity: https://eliastaylor.com/noexploit/

Low Level's coverage: https://www.youtube.com/watch?v=QRABrn606LE



CHAPTERS

00:00 - php2shell 24 hours later

00:40 - Is the php2shell fix incomplete?

02:41 - How the PHP patch works

03:49 - Is php2shell really hard to exploit?

07:04 - AI exploit development methodology

09:01 - Exploiting PHP/Apache and WordPress



SUPPORT

Per video: https://www.patreon.com/join/liveoverflow

Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

Buy my handwriting font (ad): https://shop.liveoverflow.com/



WATCH, FOLLOW & READ

Second channel: https://www.youtube.com/LiveUnderflow

Twitch: https://twitch.tv/LiveOverflow/

Twitter: https://twitter.com/LiveOverflow/

Instagram: https://instagram.com/LiveOverflow/

TikTok: https://www.tiktok.com/@liveoverflow_

LiveOverflow blog: https://liveoverflow.com/

Hextree blog (ad): https://www.hextree.io/blog



#PHP2SHELL #LiveOverflow



(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.