Ep 05October 30, 202630 Min
Ep 5: The Race for PHP2shell
The Race for PHP2shell
On October 21, the PHP Project shipped emergency fixes for two unauthenticated RCE flaws, together known as PHP2shell, rated 9.2 on CVSS 4.0. Probing started the same day, at least one attempt predates the patch, and anything older than PHP 8.1 isn't getting fixed.
In this episode
- How a single exposed PHP weakness becomes a path to full remote code execution
- Why PHP applications are such a common bridge from a web-facing bug to command execution
- What “getting a shell” actually means in business terms — data access, lateral movement, persistence
Keep watching
← → to move between episodesAll episodes
