php2shell set the internet on fire right? Right? There's mass exploitation happening RIGHT NOW across the whole internet and every PHP server in the entire world that hasn't been patched yet has been pwned by APTs all over. It's so over, pack it up everyone this is it.
And yet, it seems as though none of that is real and the sky is not falling. How could that be? Idk, maybe because actually exploiting these PHP vulns in a real world scenario seems to be next to impossible since nobody seemingly can leak the memory address outside of a perfectly clean lab environment. Oh you got it running against that PHP config with that OS and that exact setup? Cool, put it up on the internet and see if it still works when internet traffic is blasting it and dirtying up the heap to make that memory leak instantly break and whoopsies your ASLR bypass stops working again all the sudden.... "idk, works on my box bruh"
And here we are again going through this whole process all over with this so called http2shell (also, why are we even calling this "http2shell" and not "brotli2shell" like what does this have to do with http other than it uses http??? ...but that's a whole different conversation). But yet again, we're out here claiming the world is ending because of a memory corruption vuln that according to Imperva who initially found it even said in their disclosure "We built a standalone proof of concept to see whether the flaw could lead to code execution in a Node.js application. In fresh containers running the official vulnerable Node.js image, the application ran code supplied with the Brotli data."
Ok, so "in fresh containers" meaning that if we were to try using this against Brotli that isn't in a brand new fresh container and has a dirty heap from traffic hitting it, then does the ASLR bypass still work?
y'all gotta chill with yelling fire in the movie theater with these slop2shell news articles. I'm begging!