9bie/php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Recommended between 2026-10-22 and 2026-10-25. Last pushed 2026-10-23.
▲ 2 recommend · ▼ 0 criticisms
What hackers say
“I got it working just now; shell on any docker image i pull.”
— athrowaway3z, 2026-10-22 · strong recommendation · original comment on Hacker News ↗
show original comment
https://github.com/9bie/php2shell-bypass-aslr-exp Buy 5$ on deepseek and have it write a script to grind out the right offsets to use for the most popular docker images. I got it working just now; shell on any docker image i pull. GG this dumb ass blog-post and thread.
“The best path forward I found was using https://github.com/9bie/php2shell-bypass-aslr-exp and figuring out how to shrink the B1 leak down to >1.21MiB”
— leszczy, 2026-10-25 · original comment on Hacker News ↗
show original comment
Interesting, can you give some more info? The best path forward I found was using https://github.com/9bie/php2shell-bypass-aslr-exp and figuring out how to shrink the B1 leak down to >1.21MiB
Badge for your README
[](https://hackerrepos.org/repo/9bie/php2shell-bypass-aslr-exp)