RetroFed Forums
Your home away from modern life.
php2shell ASLR protection
Post Reply
AuthorMessage
banana_pie
piefed.zip
banana_pie@piefed.zip
Joined: 2026-10-22
Posted:   Subject: php2shell ASLR protection Quote

Attached: 1 image

There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time.
https://php2shell.censys.com/

9   Original
anamethatisnt
sopuli.xyz
anamethatisnt@sopuli.xyz
Joined: 2025-03-14
#2 Posted:   Subject: Re: php2shell ASLR protection Quote Reply

I'm so happy we've been actively enforcing updating sites to work with newer php, an apt update -y and apt upgrade -y followed by a reboot solved it without a single site breaking.

4
maniacalmanicmania
aussie.zone

maniacalmanicmania@aussie.zone
Joined: 2023-07-01
#3 Posted:   Subject: Re: php2shell ASLR protection Quote Reply

I'm so happy we've been actively enforcing updating sites to work with newer php, an apt update -y and apt upgrade -y followed by a reboot solved it without a single site breaking.

Reboot because other things required it?

1
anamethatisnt
sopuli.xyz
anamethatisnt@sopuli.xyz
Joined: 2025-03-14
#4 Posted:   Subject: Re: php2shell ASLR protection Quote Reply

Reboot because other things required it?

Reboot to ensure that all sites continued to work as expected after a reboot, didn't want to close the maintenance window before veriyfying that. :)

5
drkt
scribe.disroot.org

drkt@scribe.disroot.org
Joined: 2024-11-05
#5 Posted:   Subject: Re: php2shell ASLR protection Quote Reply

Reboot because other things required it?

Reboot to flush caches and workers

3
Post Reply Page 1