php2shell ASLR protection

Syndicated from the fediverse. Read and engage on the original instance.

php2shell ASLR protection

Attached: 1 image

There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time. https://php2shell.censys.com/

https://cyberplace.social/@GossiTheDog/117489133794519499Open link View original on piefed.zip

Comments4

4 replies

anamethatisnt

sopuli.xyz

I'm so happy we've been actively enforcing updating sites to work with newer php, an apt update -y and apt upgrade -y followed by a reboot solved it without a single site breaking.

maniacalmanicmania reply

aussie.zone

Reboot because other things required it?

anamethatisnt reply

sopuli.xyz

Reboot to ensure that all sites continued to work as expected after a reboot, didn't want to close the maintenance window before veriyfying that. :)

drkt reply

scribe.disroot.org

Reboot to flush caches and workers