@GossiTheDog@cyberplace.social
2026-10-22 22:19 UTC
Also hp system management homepage (installed on HPE Proliant servers) all ship with PHP.. with no ASLR. There doesn’t appear to be a patch for that, you can use it to surf around flat networks as it drops you as SYSTEM/root.
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-23 07:51
There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly. Which is good, because patching is going to take a long time. https://php2shell.censys.com/