青丝未散

[Pipe @nuggett_trash]

Me emocioné junto al público

[marwa @aerithstrifes]

she’s so princely i lover herrrr

[青丝未散 @qingsi_33]

@dxnlmyrs1v 小孩子喜怒哀乐都放在脸上

[青丝未散 @qingsi_33]

@ProbiusOfficial 喜欢我一个数学博主找一个开发博主然后找个鸡肋漏洞说是ai挖出来各个公司都说是严重漏洞来宣传互联网末日吗

[Jacob│AIart @Jacobaaaaa154]

不给大肥鱼吃米

大肥鱼开始撒泼胡闹了😭😭

[Jacob│AIart @Jacobaaaaa154]

来个可爱的恶鱼咆哮😍😍

[青丝未散 @qingsi_33]

@Master_HanChan 老大...

[Jacob│AIart @Jacobaaaaa154]

我gpt娘都降智成这样了，

奥特曼你坏事做尽啊😭😭😭

[兴雨 @YxzRainy]

我认为 Claude 极大概率先实现 AGI，

因为我从未见过哪家公司的所有员工加起来，
都没自家 AI 模型像人...

[Justin Elze @HackingLZ]

LLMs...Letting me do fun things I never would have wasted time on.

"I reviewed all 30 public GitHub repos for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) by reading code only. The slide has the full
grouped table; the headline findings:

Nothing works against a real target. Every genuine memory-corruption chain is lab-bound: it needs exact per-build offsets, display_errors=On, a single prefork mod_php worker, and a specific image.
Independent reviewers (allureluoli, dinosn, Gi1gamesh123) and the leaked primary source itself all converge on "no public artifact achieves code execution" on the patched core bug. Every real shell
in these repos comes from an app-side LFI or deserialization sink, not the CVE.

Three are original and real, all lab-only. 9bie (the source of the Set-Cookie leak chain), Marven11 (the most sophisticated, a true in-band leak), and Karasawa2025 (whose "Fermat" troll description
hides a working ROP + display_errors=off exploit). These are the only ones with a genuine ASLR-defeating leak primitive that is their own.

Most are copies. One original (9bie) spawned five derivatives:
- twili8 is an outright uncredited rip-off: its own README still says git clone 9bie/... and the Docker files are byte-identical.
- godylockz and xuehuolll are byte-identical to each other.
- dinosn and 3em0 are credited ports that add value.

Three are mislabeled. iQingshan, KarimUD7 (≈98% the same code), and Gi1gamesh123 exploit a different bug entirely (the Calif unserialize var_hash UAF) against their own planted endpoints, filed
under the php2shell CVE numbers.

The rest is noise. The most-starred repo (ikow, 905★) delivers the least: broken or stubbed chains with the two "real" ones paywalled behind Substack. eness (558★) is a leakless forge that can't
defeat ASLR. syrex1013 ships AI-generated fake CVEs in a side directory. Whackermelon hallucinates a non-existent openai/php2shell-checker. lcfr-eth is a parody with a memecoin address, and Icex0
is an empty repo. The genuinely honest work is the crash labs (allureluoli, slabbdev, 0x4148), which prove the bug without claiming RCE.

The ASLR column, star counts, copy lineage, and the specific "tell" for each repo are all in the table. The page is private to your account; use the Share menu if you want to send it to the team"

[天宮 秋水 @xiaoyaodez51072]

谁来救救我啊！

[xyspg @xyspgUwU]

我不行了

[Eqqie @Eqq111e]

现在在 X 上浏览漏洞细节信息，还得花时间过滤掉人类的幻觉和人类从自己 Agent 那获得的幻觉

[Ameo @LuluAmeo]

ドガの「14歳の小さな踊り子」、レゼで。🩰
頑張って、優雅にしてる。

[青丝未散 @qingsi_33]

@r3tr0spect2019 谢谢,这次真的怒气值上来了

[thantos_ovo @thantos_2518]

女孩子打人是这样↓ 女人打人是这样↓

[祥初AV导演 @skui1426]

初哥哥你想媚的究竟是谁

[Jacob│AIart @Jacobaaaaa154]

大肥鱼你怎么可以这么凶

不就是米饭给你的少了一些吗😡

[Jacob│AIart @Jacobaaaaa154]

GPT娘降智的都流口水了

[Okao @xiwaiwi0318]

求无社交遇到爱情教程