This is perhaps the most famous exploit associated with the 7.2 era. It involves an env_path_info underflow in the PHP-FPM module. Specially crafted URLs can overwrite memory.

The tool PHuiP-FPizdaM is a widely-used Go-based exploit that automatically detects and exploits this vulnerability to gain shell access.

記事URLをコピーしました