Hacker-artist couple hand-draws a comic to tell the php2shell exploit story

dejavucoder · x · 2026-10-22

Security researcher @lcfrhax's team took a different route for their php2shell release: instead of using LLMs for exploit, writeup and art, they commissioned a fully human-made comic by illustrator Stephanie Cortes — the discoverer's wife — dramatizing how the PHP memory-limit RCE was found, from a 2004 "ancient PHP artifact" to a 2020 OOM crime scene to a 2024 lab audit. The team frames it as deliberately offsetting LLM usage in their release.

Related event: php2shell Vulnerability Story Told in Hand-Drawn Comics(2 posts)→

Original post →

More from Fun

Fun channel →