Comment by ffaccount2
4 hours ago
There are many PoCs online that work on realistic setups (like PHP docker image). If you're curious you can try to replicate it locally.
4 hours ago
There are many PoCs online that work on realistic setups (like PHP docker image). If you're curious you can try to replicate it locally.
there are a number of php docker images. some are insecure by default.
many php setups sit behind nginx, caddy, or other webserver with a max body size limit.
anyone following OWASP / similar guidelines was probably okay here (for this particular PoC path), if not using apache/mod_php, i would think.