>takes down the entire 4chanMy company has a single rule regarding programming languages and frameworks to use>don't use PHP, use of PHP requires justification and approval of the CTOThis is political because your government services will most likely be fucked
it was just fearmongering there is no working exploit that doesnt rely on retarded setups.
>>544727770>there is no working exploit that doesnt rely on retarded setups.retarded setups are the vast majority thobeeit
PHP now stands for PHucked in the Pooper
>>544727433trump's retards did this
>>544727433But think of how buggy 4chan would be with modern pajeet and tranny code. At least 4chan is using a tool for the same purpose it was created for back in the early 90s.
>>544727967so why isn't there a single known case of the exploit being used? It has been known since 2019 apparently.
>>544727770The vast majority of PHP applications use php-fpm, which was one of the attack vectors. You have absolutely no clue what you're talking about. Just submit the ticket, Salheed
>>544728100did you know?PHP is a "recursive backronym" and means PHP: Hypertext Preprocessorthe entire premise was retarded from the start.
>>544728261I was wondering today why there is 10 billion js frameworks based on node.js but there's likeno Server or backend language written in Rust running with Rustor Goor whatever Apple usesor TrannyScriptthink there's fasthtml in python,which lets you code in those languages and shits out an html page.
>>544728368So cite a case of the exploit used in the wild then? This is silly security theater.
>>544728878You can look up the exploit along with a python script that will automatically exploit the vulnerability if present and get you a shell. Now go put in a ticket for an adult to update your faggot WordPress server that's likely already rooted by skids, Rajesh.
>>544727433> My company has a single rule regarding programming languages and frameworks to use.Tell them:<?phprm -rf?>Would never happen with a static website
>>544728878Companies typically don't advertise security breaches until they're legally obligated to do so.
>>544727433
>>544727770>there is no working exploitit dos'd 4chan
>>544732197admins did it themselves until a fix was pushed, and the site was always up to browse
>>544729504>target acquired>127.0.0.1/index.phpomg am i got hacked?
>>544729504you're retarded.>>544728878is right.in order to use this exploit you need an insane amount of other pieces to fall into place like pre-existing lfis or memory leaks so you can read memory pointers. it was just show. best you can do with it is dos websites but rce is impossible to obtain with just that exploit.
