Honeypot catches first validated in-the-wild PHP2Shell RCE, analyzed by an AI agent
moyix · x · 2026-10-25
Security researcher 0x4D31 reports what may be the first publicly documented and validated in-the-wild PHP2Shell RCE, with the entire analysis performed by his AI agent. Full reports, including initial attempts (Oct 22-24) and the confirmed RCE (Oct 24), are published in the honeypot-data/reports/php2shell directory on GitHub.
More from coding & agent
- MyLimits browser extension to launch this weekend with multi-account limit tracking — cneuralnetwork · 2026-10-25
- Open-source extension MyLimits shows Claude, Codex and Cursor usage limits in one place — cneuralnetwork · 2026-10-25
- Kimi coding agent flagged for recursively deleting folders before recreating them — Xianbao_QIAN · 2026-10-25
- LearnHarness hits 1k stars: open-source agent harness that teaches from what you already know — burny_tech · 2026-10-25
- Cursor screenshot shows unreleased 'Gemini 4 Argon Medium' model and Claude Code import — weswinder · 2026-10-25
- Coding agent vetoes Effect rewrite: plain TypeScript with 250 lines of helpers wins — gabe_ragland · 2026-10-25