
hexkaster retweeted
Ended up awake for the whole night banging my head against LLMs trying to make a PoC for the PHP bug that's getting published today and managed to get something working!
Pretty interesting chain. The exploit I came up with has a prereq for leaking addresses (its in php.ini, wont add details for now just in case) but i think there might be a better leak oracle that I (ermm.. gpt-5.6-sol) couldn't find.
Seems like all public PoCs are mostly (unfiltered, lol) AI slop so far..
MEU PRIMEIRO BOUNTY FOI NO TWITTER E ME PAGOU $5000 NA @Hacker0x01!
hackerone.com/p1ra
ATUALMENTE LIDERO O RANKING DO X EM 2026!!
NOIS EH A TROPA DO TREM BALA PORRAAAAAAAA 🚄🚄🚄🚄🚄
SQLI? Não rico.
XSS? Pobre.
SSTI? Rico {{7*7}}.
Race Condition? Rico. Muito rico.
CSRF? Pobre. Mas muito, muito pobre.
Open Redirect? Hahahaha NÃO.
RCE? No mínimo 10 gerações de riqueza.
IDOR? Quer ser rico, mas não.
Business Logic? Rico. Rico de verdade.


































