points by shawabawa3 4 days ago | 0 comments
> to write a php2shell RCE for nginx and mediawiki on the same version of php as TFA.
Ok but a mediawiki page is obviously not comparable
People were complaining that originally it was just using php to serve a static index.html file
It looks like after 18-19hours they updated it to serve a real .php file and it was hacked less than 2 hours after that
The attack is against the underlying php install, and is application-agnostic, I was merely duplicating the trailofbits POC.