Watch · Hacking and CTFs
php situation 24h later
The Brief
- Examines claims that the php2shell fix is incomplete and that the bug is too hard to exploit.
- Explains how the PHP patch works.
- Shows how AI was used to help achieve remote code execution against PHP/Apache and WordPress.
- Covers an AI exploit development methodology.
Why watch · It weighs competing claims about how complete the php2shell patch is and how hard the bug is to exploit, with a walkthrough of AI-assisted exploitation against PHP/Apache and WordPress.
- php2shell
- PHP
- WordPress
- AI exploit development
Summarised by Claude from the video’s title and description – YouTube doesn’t make transcripts available, so check the video for the details.
Chapters
Show the full video description ›Hide the video description
Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped me get remote code execution against PHP/Apache and WordPress. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy RESOURCES Previous video, The race to the first exploit // php2shell: https://www.youtube.com/watch?v=7CiZmq2llDg php2shell write-up: https://calif.io/php2shell/ Elias Taylor's post on exploit complexity: https://eliastaylor.com/noexploit/ Low Level's coverage: https://www.youtube.com/watch?v=QRABrn606LE CHAPTERS 00:00 - php2shell 24 hours later 00:40 - Is the php2shell fix incomplete? 02:41 - How the PHP patch works 03:49 - Is php2shell really hard to exploit? 07:04 - AI exploit development methodology 09:01 - Exploiting PHP/Apache and WordPress SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #PHP2SHELL #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
