trunip

[bluehuecat @bluehuecat]

#PHP2Shell

[trunip @trunipe4rc]

additionally, really looking into some novel dse bypass techniques as well, none that I found are reliable tbh

[trunip @trunipe4rc]

After today the world should burn, it was a bad idea to try creating a PoC rather than sticking to what I do. If you guys are into offsec windows dev hit me up we can discuss some ideas.

Meanwhile some cool data only kernel write byovd juice for people: https://t.co/50XOXpKpof

[trunip @trunipe4rc]

Been spending time on smep smap dep bypass research. Fun next thing to try is get things to work using ropgadgets from ntoskrnl.

The above poc should give nt authority shell if the right eproc_token is set

[Calif @calif_io]

Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: https://t.co/I88EQFrUHa

His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.

[trunip @trunipe4rc]

@usetraceix @HackingLZ yeah same lmao

[trunip @trunipe4rc]

@LiveOverflow its fucking slop

[trunip @trunipe4rc]

slop of the year is out

[trunip @trunipe4rc]

man getting rce after the uaf is the hard part, not sure if there's gonna be a reliable remote exploit that'd come out. it'd be an eternal blue level shit if it works out

[trunip @trunipe4rc]

@beescoitu By any chance use of serialized gadgets part of the chain? https://t.co/jJ3PiqMBoY

[trunip @trunipe4rc]

@Debug_sec @Zaddyzaddy hey can you check dm please

[trunip @trunipe4rc]

@MSNightmare2000 Anyone been able to make it work to read sam security system hives?