“I’m trying to find God before God finds me”. لا غالبَ إلا الله Also, (╯°□°)╯︵ ┻━┻
Joined August 2017
- Tweets40.9K
- Following5.5K
- Followers2.6K
- Likes178K
“LLMs are useful tools in the hands of skilled professionals, but for others, they're often just a Dunning-Kruger accelerator.”
I'll be the first to admit I'm mediocre at exploit development, but I am in contact with enough extremely talented exploit developers to say this for certain:
Anyone claiming they were "easily" able to generate a working php2shell exploit with AI is either:
a) a world-class exploit developer with an extreme case of imposter syndrome.
b) currently looking at some very confident-sounding but wrong LLM output.
I'm rather certain it's the latter based on the number of AI-hallucinated exploits I've seen posted on GitHub. Threat actors are also blasting my honeypot network with "php2shell" exploits that not only don't work, but aren't even within 10,000 miles of anything to do with how the exploit actually works.
I've seen the same technique from the attached image in multiple alleged "php2shell exploits", including one on GitHub with over 100 stars. Problem is, it's not php2shell, nor is it even a vulnerability at all. It's a technique known as "session poisoning", which can be leveraged to exploit local file inclusion (LFI) vulnerabilities in PHP apps (not PHP itself).
The only thing it has in common with CVE-2026-109618/CVE-2026-109619 is they both use the "PHP_SESSION_UPLOAD_PROGRESS" feature. And mitigation advice for both issues reference setting "session.upload_progress.enabled" to "Off".
People are shoving loose details of the vulnerability into LLMs, the LLMs are keying in on the "PHP_SESSION_UPLOAD_PROGRESS" string, then generating session poisoning code that has nothing to do with the actual CVE. And because the people doing this have absolutely no idea what they're doing, they're confident enough to post their "proof of concept exploit" to GitHub and share it on social media.
So if you see people talking about "session poisoning + LFI" it's likely their LLM hallucinated an exploit based on a 2018 blog by Orange Tsai talking about a local file inclusion attack vector.
What's even worse is that "security researchers" are then using LLMs to triage these exploitation attempts, falling victim to the same hallucinations, then confirming there is ongoing mass-exploitation (there currently isn't).
The actual real exploit is very difficult to exploit, and so far I've not seen anyone successfully get it working on more than a handful of PHP version with highly-specific configurations.
LLMs are useful tools in the hands of skilled professionals, but for others, they're often just a Dunning-Kruger accelerator.
کاشان بٹ Kashaan retweeted
Sarah Helm is one of millions of people around the world inspired by the Palestinian spirit of resistance against extraordinary levels of barbarism.
The security state miscalculated that it had all the state of emergency powers acquired through terrorism laws necessary to crush dissent.
We thank the people of Palestine for inspiring us to identify and resist those permanently at war. These oligarchs use settler colonies to experiment a return to feudalism managed through Big Tech.
Sarah Helm would be the first to say the people of Palestine deserve all the credit. Nevertheless, it's the bravery and resistance of people like her which must be acknowledged and presented as evidence that attempts by the security state,to incite and exploit prejudices against Muslims, as they grabbed power have not been as successful as they hoped.
Yup, @SafdarAlam is right. 😔
Exclusive: The UK’s largest “sharia-compliant” fund, HSBC’s Islamic Global Equity Index Fund, has purchased more than $100m worth of shares in 5 companies linked to the Israeli military in the first half of this year, a @MiddleEastEye analysis can reveal
middleeasteye.net/news/hsbc-…
کاشان بٹ Kashaan retweeted
In 1910, the Palestinian intellectual Abdullah Mukhlis published an article explaining how Haifa’s new Jewish soap factory was employing only Jewish workers, refusing to hire Arab workers & that the Jewish community of Haifa was starting to interact exclusively with other Jews.
He wrote: “Establishing a Jewish state after thousands of years of decline … we [the Arabs] fear that the new settler will expel the indigenous and we will have to leave our country en masse. We shall then be looking back over our shoulder and mourn our land as did the Muslims of Andalusia.”
Palestinians saw what was coming 38 years ahead of time.
source: archive.org/details/enemiesn… p.39
Supermarkets are marketing seasonal things so early that my toddler thinks Santa is a Halloween character. 🤣
کاشان بٹ Kashaan retweeted
For decades, Palestinians have endured a continuing Nakba under Israeli occupation: dispossession, ethnic cleansing, arbitrary detention, torture, killings and the destruction of their homes.
In a witness statement submitted last year, Dr. Mousa Abu Marzouk detailed the conditions Palestinians were living and what happened on 7th of October.
To understand October 7th, you cannot ignore what came before it.
Support the deproscription application here to lift the ban of the Palestinian Resistance group: cage.ngo/campaigns/support-t…
کاشان بٹ Kashaan retweeted
October 7th happened entirely on post-1967 occupied territory. The same territory the entire international community calls upon Israel to withdraw from every year since.
Under the Laws of Belligerent Occupation, every time the IDF fought back on that day, it was a war crime.
