Well this is interesting re: php2shell
According to this https://www.theregister.com/security/2026/10/22/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution/5304883 the whole reason so many of these so-called PoC exploits didn't work was because they were stopped by ASLR. Which means these were developed for intentionally broken targets, lmao

and then someone made an ASLR bypass and actually created a real, weaponized exploit, with teeth