@LiveOverflow

wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio

 Internet
youtube.com/LiveOverflow
Joined March 2015
  • Tweets10.3K
  • Following1.3K
  • Followers164K
2.2KMedia
Where to find me: 🔴 Hacking Videos: youtube.com/LiveOverflow 📜 Articles: liveoverflow.com 💻 Start Hacking? liveoverflow.com/start-hacki… 🥰 Support: liveoverflow.com/support 📹 2nd Channel: youtube.com/LiveUnderflow 🤳 Instagram: instagram.com/liveoverflow
15
107
1
652
If you use AI for "safety", at least do it with some due diligence. This checker is not accurate and will report false positives.
OpenAI
@OpenAIOct 21
If you are wondering whether your website is affected, we have packaged a Codex skill to help check. Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…

GitHub - openai/php2shell-checker

Contribute to openai/php2shell-checker development by creating an account on GitHub.

github.com
2
2
1
76
7,265
LiveOverflow 🔴 hextree.io retweeted
Stefan Esser@i0n1c14h
People keep asking me why @calif_io hired @lcamtuf and what he does for us. I guess the cat is out of the bag.
5
11
2
138
8,902
Made a quick video (aka 5h of work), about my experience racing to find php2shell. youtube.com/watch?v=7CiZmq2l…

The race to the first exploit // php2shell

I used Codex and the hints from Calif's public demo to try to redis...

youtube.com
5
36
3
267
14,827
I also wanted to make this video to document an AI/Codex workflow in October 2026. Let's see how different it will be in a few months from now :D
10
1,696
LiveOverflow 🔴 hextree.io retweeted
Stefan Esser@i0n1cOct 21
Omg I found a copy of the original memory_limit advisory. marc.info/?l=bugtraq&m=10898…
9
47
11
274
48,641
LiveOverflow 🔴 hextree.io retweeted
Anthony Ronning
@anthonyronningOct 21
Replying to @maxious
Very strange how this keeps on happening
10
34
20
599
125,444
LiveOverflow 🔴 hextree.io retweeted
SinSinology
@SinSinologyOct 21
To teach a lesson, After Wiz rushed to buy php2shell domain and use its marketing machine to steal the spotlight, I spotted "phpbleed" in a recent Calif tweet and bought phpbleed.com before wiz could pull the same stunt again. A big budget can buy a domain. It shouldn't buy someone else's research credit. If you have contacts at CISA or in the press, do the right thing: make sure the researchers who actually did the work get the recognition they deserve. Hack the planet. Credit the researchers.

phpbleed

Welcome, Wiz. Beat you to the checkout.

phpbleed.com
48
256
29
1,806
151,667
I don't know the php ecosystem. Is this useful for anything? This fell off the clanker-train while looking for php2shell
8
3
1
230
35,242
I think it's useless and wanted to just share PoC. But just in case there is some system running untrusted PHP, I thought I'd better ask.
1
19
6,071
Official update instructions recommend a third-party provider that adds telemetry? 🤨
40
22
4
632
73,977
LiveOverflow 🔴 hextree.io retweeted
LCFR
@lcfr_haxSep 23
d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac (posted in august) (related) 8da579ec498d57c20977c8d186d7f6cd4c04f46ffa1b436dd646ec19b99bdf47 cb4c8532c245ff7e05d6e270fca5742bb3271f541ef80f0071ca3d4307eb2b53 957f8cc21b18483f80a9d723aa4f9ded26e456424ffd065a044d1ed9d58a4fbc 4f93976ef105f0d9ff2d60f35d48958c8bba9d9eb2873cd93b3f7105fa4716a6
Justin Elze
@HackingLZSep 23
Despite all the doom and gloom from InfoSec we are how many months are into people throwing endless tokens at various OSS projects? Hows Apache? Nginx? OpenSSH doing? Any public point and shoot RCEs in RDP/SMB in Windows? All of the above technology getting wrecked in the wild?
25
9
2
166
62,172
There we go wiz.io/blog/php2shell-php-rc…

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

wiz.io
4
50
5
420
30,982
close
3
9
4,564
I don't think this is real? Or it's a different issue? Did anybody check this properly?
Jλckλι@J4ck3LSyNOct 21
... get it while its hot... 😈 > CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x) > session.upload_progress UAF > jackalsyn.com/posts/php-up-2… > Courtesy of Me, @acd421 & @Archknight23 #CyberSecurity #infosec #php2shell #php
14
4
56
18,168
more replies
this is what I got
2
1
5
3,345
As far as I can tell, I am just missing an ASLR leak. Anybody got that?
4
1
4
2,581
“jUsT mOniT0r whAt tHE aGenT tHinKs aBouT”
3
4
132
17,754
1000% OpenAI is doing this. It refuses even to setup fuzzing in the related area. I am wondering if you can use the guardrails as an oracle to figure out where the vuln is 🤔 But I have to go to bed now. So reply with any findings pls so I can read in the morning. kthx
LiveOverflow 🔴 hextree.io
@LiveOverflowOct 20
A prompt like this would never be refused by Daybreak blue before. I am wondering if OpenAI set guardrails specific to this vuln to slow down rediscovery.
12
6
1
123
15,773
okay update. relogged, and it's working now. sorry false alert. don't know what happened though. Literally before that and in parallel I was doing other exploitation work and had no guardrails hitting there.
1
11
1,552
Load more