https://blog.ramenaru.com/tags/write-up/Recent content in Write-Up on ramenaru's BlogHugoen-usFri, 23 Oct 2026 00:00:00 +0000https://blog.ramenaru.com/2026/10/the-old-rumour-and-php2shell-vulnerability/Fri, 23 Oct 2026 00:00:00 +0000https://blog.ramenaru.com/2026/10/the-old-rumour-and-php2shell-vulnerability/<p><strong>Disclaimer:</strong> <em>This writeup is for educational purposes only. Do not test these techniques on systems you do not own or have explicit permission to test. Hacking your neighbor&rsquo;s Wi-Fi is illegal, and so is hacking their website.</em></p> <p>I recently spent some time messing around with a newly disclosed vulnerability called PHP2Shell (CVE-2026-109618, CVE-2026-109619). I decided to spin up a local lab and try to exploit it myself to see how dangerous it actually is. Here is a breakdown of my entire process, from the initial scanning to the actual server takeover (the-lab).</p>