goku

[Hash @hash_s3c]

hmmm 👀 who want php2shell exploit for christmas?

[goku @gokupwn]

@S1r1u5_ @Behi_Sec I agree and can confirm, as I have been running open source models and I found similar results

[goku @gokupwn]

@Mesalam_403 ايضاً لحد الأن كل ال exploit الموجودة على GitHub هي خطأ، ومن ضمنهم لي حضرتك بتشوفه حالياً

[goku @gokupwn]

@Mesalam_403 اقرأ الreport الأساسي على https://t.co/FLkKmezBhI ال LFI ما له دخل، وأي poc يعتمد على وجود LFI هو غير مطابق للحقيقة وللثغرات المكتشفة.
ايضاً ال LFI لوحدها توصلك ل RCE ما لي داعي لل RCE ب php ولا لإستغلال اي ثغرة

[goku @gokupwn]

@GrahamHelton3 Knowledge matter alot, I don’t see someone with no proper knowledge finding anything proper at all

[goku @gokupwn]

@SirBagoza انت حالياً شايف إن كل أهبل مع AI معه exploit؟ ولا مش ملاحظ إن بس لي هم أصلاً تنانين سابقاً معهم؟
لو فعلاً لي بتحكيه كنا شفنا exploit مثل الخلق مش slop

[goku @gokupwn]

@simplylurking2 @calif_io My dream now to be one of them! what ana amazing team🔥

[goku @gokupwn]

@LiveOverflow Not proper, neitheir the mitigation

[goku @gokupwn]

@lcfr_hax Legenddd

[Hash @hash_s3c]

Hmmmmm 👀👀
```
PHP >= 5.4.0 RCE by Calif.10
[*] START operation initialized
[*] INFO target acquired :: http://127.0.0.1:29264/wordpress/wp-content/index.php
[*] INFO runtime profile :: ubuntu2604-php85
[*] INFO worker strategy :: adaptive
[*] INFO execution objective :: in-band command 'uname -a; id; echo "pwned" > /var/www/html/wordpress/wp-content/uploads/pwned.txt'
[*] INFO retry envelope :: attempts=8 timeout=25s
[*] INFO selected payload :: ubuntu2604-php85
[*] INFO target ABI :: Ubuntu 26.04 package PHP 8.5.4 x86-64
[*] INFO package build :: 8.5.4-0ubuntu1 through 8.5.4-0ubuntu1.3
[*] INFO SAPI boundary :: Apache prefork/mod_php
[*] STAGE CHAIN ACTIVE :: profile=ubuntu2604-php85 elapsed=0s
[*] STAGE exploit attempt :: 1/8
[+] INFO LEAKED :: compact natural tables=149
main_heap :: 0x7b8fd6800000
stale_reference :: 0x7b8fd6875c08
zval_ptr_dtor :: 0x7b8fd8a8c0
zend_call_function :: 0x7b8fd6f2a9d0
[*] EXECUTED ->
Linux php-8u6t-resolute-amd64 7.0.0-34-generic #34-Ubuntu SMP PREEMPT_DYNAMIC Wed Sep 2 14:29:37 UTC 2026 x86_64 GNU/Linux
uid=33(www-data) gid=33(www-data) groups=33(www-data)
[+] OK CHAIN COMPLETE :: profile=ubuntu2604-php85 elapsed=15.1s
```

[goku @gokupwn]

@infosec_au Amazing

[goku @gokupwn]

@edwonedwon @0x88FFA357 Npcs everywhere

[goku @gokupwn]

@msuiche Ohh no … but anyway I think it’s a mix of proper harnessing, advanced models, and knowledgeable user

[goku @gokupwn]

@msuiche I mean using AI for coding = causing more vuln to arise

[Hash @hash_s3c]

Hello X
Here is our analysis of the Nextjs “use safe” unauthenticated RCE, included in the out-of-band security update:

https://t.co/TQWikvuGs7

[goku @gokupwn]

@mitsuhiko It’s a useless car, and people just like anything new, for me it doesn’t matter. What matter is curing cancer but somehow all ai labs want to hack other companies, develop viruses and warn us about chinise model worms going crazy (and they are the one creating it btw) so Idgaf

[goku @gokupwn]

@BladonStuart @CloudflareDev I need this 😭😭

[goku @gokupwn]

@ClaudeDevs have you enhanced the desktop app speed? it was so slow last time i tried it, that's why i preferred using the cli over desktop