php2shell-bypass-aslr-exp
A security research proof of concept for studying a PHP session lifecycle flaw in a specific PHP and Apache setup. It documents a controlled reproduction and an isolated environment for understanding the behavior.
Pick a small issue you can reproduce, then fix it with your AI coding agent.
Share on XNo license declared
Overview
This repository is a proof-of-concept research project about a PHP session lifecycle flaw and its potential for remote code execution under a specific PHP and Apache setup. It explains the conditions used in the author's controlled reproduction and provides a Docker-based environment for studying the behavior. The project is intended for isolated, authorized security research and technical understanding, not as a general-purpose PHP tool. Its main use is to examine how session initialization and memory handling interact in the documented setup.
Key features
- Describes the PHP session lifecycle behavior examined in the report.
- Provides Docker configuration for a controlled research environment.
- Documents the PHP and Apache setup used in the reproduction.
Best for
Security researchers studying PHP session handling in an isolated, authorized environment. It is most useful when examining the documented PHP and Apache configuration.
- Upstream
- 9bie/php2shell-bypass-aslr-exp
- Fork on GitHub
- Guo-astro/php2shell-bypass-aslr-exp
- Upstream stars
- 564
- Category
- Security and networking
- Language
- Python
- License
- No license declaredWithout a license, the author keeps all rights. Ask the upstream owner before reusing the code.
- Forked
- 2026-10-21
- Sync status
- In syncLast synced 2026-10-22
More in Security and networking
A ProxyPin script for rewriting Apple WLOC location responses in authorized iOS tests. It helps QA teams reproduce network-based location scenarios using selected coordinates.
Forked 2026-10-18Last synced 2026-10-22License: MITSecurity and networkingGitHub
Scripts that query crt.name Certificate Transparency records to find subdomains, with Bash and Python command-line tools for collecting results and saving them to a file.
Forked 2026-10-14Last synced 2026-10-22License: MITSecurity and networkingGitHub
A practical guide to running a personal Xray proxy on a VPS, with Hysteria2 as the main entry point and optional backup entries. Route selected AI traffic through WARP and, if needed, Claude or Anthropic through a fixed SOCKS5 exit.
Forked 2026-10-12Last synced 2026-10-22License: MITSecurity and networkingGitHub
Clearcam adds object detection, tracking, event search, and notifications to security camera feeds. Run its Python NVR locally and optionally use the iOS app for remote viewing and alerts.
Forked 2026-10-12Last synced 2026-10-22License: GPL-3.0Security and networkingGitHub