Login
You're viewing the assemblag.es public feed.
  • Jimmy Wyliemayahustle@infosec.exchange
    Oct 22, 2026, 5:11 PM

    Framing the php2shell story as "AI uncovered php2shell" is like hearing an awesome song and crediting the guitar instead of the player. It's just incorrect and steals credit from a good researcher.

    The underlying bug was discovered in 2020, a related one in 2024, and they were both rediscovered again through exploitation in 2026 by a human researcher. The researcher used LLM tech to help with parts of the process, not all of it, and says so in the writeup.

    calif.io/php2shell/

    💬 1🔄 175⭐ 200

Replies

  • shellsharksshellsharks@shellsharks.social
    Oct 22, 2026, 5:43 PM

    @mayahustle Yeah. This this this. Google and OpenAI out here crediting themselves for finding the vuln because their models were used as part of the process is only a hair less absurd than the manufacturers of the chair Ryan sat on while he was expertly crafting this exploit taking credit for php2shell as well. Hell, get everyone involved taking credit! The electric company for providing power to his computer, bakery for providing Ryans breakfast that morning, etc… etc…

    💬 0🔄 1⭐ 5