I tested it against a stock PHP on a fresh Hetzner Ubuntu VM (php-fpm 2:8.5+99ubuntu1) and it does not seem to work. No RCE, not even a worker crash on both purported exploits (618/619. I'd be interested to hear from someone who achieved either.
Dr. Christopher Kunz on Nostr: The "jackalsyn" PHP RCE PoC is built against lsphp (LiteSpeed SAPI), not stock ...
The "jackalsyn" PHP RCE PoC is built against lsphp (LiteSpeed SAPI), not stock php-fpm, for whatever reason. It also notably seems to up against the wrong tree.
I tested it against a stock PHP on a fresh Hetzner Ubuntu VM (php-fpm 2:8.5+99ubuntu1) and it does not seem to work. No RCE, not even a worker crash on both purported exploits (618/619. I'd be interested to hear from someone who achieved either.
I tested it against a stock PHP on a fresh Hetzner Ubuntu VM (php-fpm 2:8.5+99ubuntu1) and it does not seem to work. No RCE, not even a worker crash on both purported exploits (618/619. I'd be interested to hear from someone who achieved either.