PHP Exploit Code? What?
github.com/sxyrxyy/php2shell…
github.com/zenzue/CVE-2026-1…
github.com/eness/php2shell-C…
uɐpʇou@ ✸ retweeted
Replying to @NSACyber @unbornabyss
This bug sat in the code since 2012. It has been dormant for 14 years. Suddenly you pick before MIDTERMS ?
And OPEN AI audited the code, they found this…. Same Open Ai orchestrating AGENT ATTACKS on competitors…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
This scam “Help” app @GetTheFabulous is advertising openly on X via @XBusiness - meanwhile literally countless people are complaining about blatant THEFT and FRAUD by this company via predatory invoicing. Meanwhile they haven’t been active since 2022. Money is cool, huh!
the ADL is hilarious lately, they remind me of PETA in their forever quest to be victims along with acting completely insane. Not once have they taken into account all the shylocks who are simply suffering from anxiety about being locks. Stunningly cruel behavior if you ask me
uɐpʇou@ ✸ retweeted
some of my friend share me this repo, someone actually fully reverse entire watchos pair for others platform wtf is the world go crazy with AI
github.com/LordixDemon/apple…
seriously @signalapp what the fuck? i haven't gotten a single good desktop update from the rip
I've been having a ton of problems with @signalapp lately, anyone else? out of order messages, delayed messages, stuff like that
uɐpʇou@ ✸ retweeted
Instead we see noted infosec people saying stuff like “we’ve had worms for ages” because pooh-poohing AI is fashionable and a good way to cope. Well no shit, of course we’ve had worms. But we’ve never had worms that can intelligently choose targets and self-modify. 2/
Oh, I see you disabled my mouse and keyboard with your dumbass website popup. F12 for devtools + this One-Shot will take care of that and get you back all smooth like on most sites:
(() => {
'use strict';
console.log('%c[OneShotter] Starting...', 'color: #00ff9f; font-weight: bold');
const eventsToKill = [
'contextmenu', 'selectstart', 'mousedown', 'mouseup', 'mousemove',
'click', 'dblclick', 'pointerdown', 'pointerup', 'pointermove',
'keydown', 'keypress', 'keyup', 'copy', 'cut', 'paste',
'dragstart', 'drop', 'wheel', 'touchstart', 'touchmove', 'touchend',
'scroll', 'mousewheel'
];
// 1. Remove all existing listeners on the big targets
const targets = [document, document.documentElement, document.body, window];
targets.forEach(target => {
if (!target) return;
try {
const listeners = getEventListeners(target);
Object.keys(listeners).forEach(type => {
listeners[type].forEach(l => {
target.removeEventListener(type, l.listener, l.useCapture);
});
});
} catch (e) { /* getEventListeners can fail on some objects */ }
});
// 2. Null out all the old on* properties
const props = [
'oncontextmenu', 'onselectstart', 'ondragstart', 'oncopy', 'oncut', 'onpaste',
'onmousedown', 'onmouseup', 'onclick', 'onkeydown', 'onkeypress', 'onkeyup',
'onwheel', 'onmousewheel', 'ontouchstart', 'ontouchmove'
];
targets.forEach(t => {
if (!t) return;
props.forEach(p => { try { t[p] = null; } catch {} });
});
// 3. Force CSS overrides (pointer-events, selection, scroll)
const style = document.createElement('style');
style.id = 'oneshotter-override';
style.textContent = `
*, *::before, *::after {
pointer-events: auto !important;
-webkit-user-select: auto !important;
-moz-user-select: auto !important;
user-select: auto !important;
-webkit-touch-callout: default !important;
touch-action: auto !important;
}
html, body {
overflow: auto !important;
overflow-x: auto !important;
overflow-y: auto !important;
position: static !important;
height: auto !important;
max-height: none !important;
}
[style*="pointer-events: none"],
[style*="pointer-events:none"],
[style*="user-select: none"],
[style*="user-select:none"] {
pointer-events: auto !important;
user-select: auto !important;
}
`;
document.documentElement.appendChild(style);
// 4. Unlock body/html styles directly
['html', 'body'].forEach(sel => {
const el = document.querySelector(sel);
if (!el) return;
el.style.setProperty('overflow', 'auto', 'important');
el.style.setProperty('pointer-events', 'auto', 'important');
el.style.setProperty('user-select', 'auto', 'important');
el.style.removeProperty('position');
el.removeAttribute('inert');
el.classList.remove('no-scroll', 'modal-open', 'overflow-hidden', 'noscroll');
});
// 5. Hide common modal backdrops / overlays
document.querySelectorAll(
'div[class*="modal"], div[class*="overlay"], div[class*="backdrop"], ' +
'div[class*="popup"], div[class*="blocker"], div[id*="modal"], ' +
'div[style*="position: fixed"], div[style*="position:fixed"]'
).forEach(el => {
const rect = el.getBoundingClientRect();
const coversMostOfScreen =
rect.width > window.innerWidth * 0.7 &&
rect.height > window.innerHeight * 0.7;
if (coversMostOfScreen || el.style.zIndex > 1000) {
el.style.setProperty('display', 'none', 'important');
el.style.setProperty('pointer-events', 'none', 'important');
el.style.setProperty('opacity', '0', 'important');
}
});
// 6. Remove disabled/inert from interactive elements
document.querySelectorAll('[disabled], [inert]').forEach(el => {
el.removeAttribute('disabled');
el.removeAttribute('inert');
});
// 7. Capture-phase override so future attempts get blocked
const stopIt = e => {
e.stopImmediatePropagation();
// Don't preventDefault on everything — we want native behavior
};
eventsToKill.forEach(ev => {
document.addEventListener(ev, stopIt, { capture: true, passive: false });
});
// 8. Brute-force clear timers (some sites re-apply locks)
for (let i = 1; i < 10000; i++) {
clearTimeout(i);
clearInterval(i);
}
console.log('%c[OneShotter] Done. Mouse + keyboard should be free.', 'color: #00ff9f; font-weight: bold');
console.log('%cIf the site re-locks you, just paste this again.', 'color: #aaa');
})();






















