Comment by decidu0us9034
6 hours ago
HITCON CTF has a realistic php2shell challenge. Think it has ended up with 0 solves so far, not sure.
6 hours ago
HITCON CTF has a realistic php2shell challenge. Think it has ended up with 0 solves so far, not sure.
The "realistic setup" used for this didn't have a php page on it initially.
I'm skeptical of the value of such setups, unless it's clear it's an out of the box setup, and we already know those are totally broken.
I don't understand who these people think they are really fooling. Is this some AI denial?
There are many PoCs online that work on realistic setups (like PHP docker image). If you're curious you can try to replicate it locally.
there are a number of php docker images. some are insecure by default.