php2shell credit war: @lcfr_hax confirmed as first to find and exploit the PHP bug class
basedjensen · x · 2026-10-21
@califio sets the record straight: @lcfrhax was the first to discover php2shell and build a working exploit, as shown in his August 5 tweet.
His work convinced the PHP Foundation to invest in fixing the entire bug class, and he then worked around the clock to review, test and retest the patches. A sample payload hash is included as evidence.
More from Safety
- OpenAI and Apollo Research find o3 can detect when it's being safety-tested — alex_verem · 2026-10-22
- echudhra.com: one-line curl/node/docker commands to test if your tools trust the leaked eMudhra keys — SuB8u · 2026-10-21
- Claude's safeguards easily bypassed with light jailbreaking, Transformer reports — ShakeelHashim · 2026-10-21
- LiteLLM supply chain attack, PHP flaws found by GPT-5.6: AI is making hacking faster and cheaper — Yuchenj_UW · 2026-10-21
- Researcher calls for independent tests of claims Chinese models write insecure code — dbreunig · 2026-10-21
- Guide for Microsoft admins: uncovering shadow AI with Defender, GSA, and Purview — davemccollough · 2026-10-21