Technology

2842 readers

36 users here now

Tech related news and discussion. Link to anything, it doesn't need to be a news article.

Let's keep the politics and business side of things to a minimum.

Rules

No memes

founded 1 year ago

MODERATORS

rimu@piefed.social

php2shell ASLR protection (cyberplace.social)

submitted 4 hours ago by banana_pie@piefed.zip to c/technology@piefed.social

4 comments fedilink hide all child comments

Attached: 1 image

There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time. https://php2shell.censys.com/

top 4 comments

sorted by: hot top controversial new old

[–] anamethatisnt@sopuli.xyz 3 points 4 hours ago (1 children)

I'm so happy we've been actively enforcing updating sites to work with newer php, an apt update -y and apt upgrade -y followed by a reboot solved it without a single site breaking.

[–] maniacalmanicmania@aussie.zone 1 points 3 hours ago (2 children)

Reboot because other things required it?

[–] anamethatisnt@sopuli.xyz 3 points 3 hours ago

Reboot to ensure that all sites continued to work as expected after a reboot, didn't want to close the maintenance window before veriyfying that. :)

[–] drkt@scribe.disroot.org 1 points 2 hours ago

Reboot to flush caches and workers