My PoC (generated) was able to exploit an index.php with a simple echo.

The only thing you have to know in advance is the relative memory offset distances, and that's it. Memory feng shui was the longest part of the implementation.

[1] https://github.com/cookiengineer/actual-php2shell

▲

cluckindan 4 hours ago | parent | next [-]

Did you even read the diff, it synthesized intentionally vulnerable code which trivializes the exploitability

▲

31 minutes ago | parent | next [-]

[deleted]

▲

what 4 hours ago | parent | prev [-]

I would assume he didn’t read anything in the repo. It also requires disabling ASLR.

	▲	cookiengineer an hour ago \| parent [-]
		Eh, no? It is split up into two branches and demos, see the heap feng shui document? ASLR enabled requires a way to create more data, which I intentionally did not create in the index.php because other folks claimed that is "cheating". That was the demo that wiz created. Maybe you should read the repo next time? It is literally headline 4. The whole point of this demo is that the assumed to be hard part (mem feng shui) is what LLMs are actually good at.

▲

Onavo 6 hours ago | parent | prev [-]

Try finding a modern Linux distro without ASLR enabled defaults.

	▲	cookiengineer 39 minutes ago \| parent [-]
		> ASLR Read the heap feng shui doc, and headline 4 in the README. The involved heap feng shui is independent of ASLR. Maybe read up on what ASLR actually does before trying to be a wiseass?