DigiNews

Tech Watch Articles

← Back to articles

Show HN: PHP 8 disable_functions bypass PoC

Quality: 7/10 Relevance: 9/10

Summary

A Show HN post introduces a PHP 8 sandbox escape PoC that bypasses disable_functions using a use-after-free technique and DateInterval primitives. The repo demonstrates the exploit across multiple PHP distributions and server interfaces, while warning that disable_functions is not a robust security boundary and providing mitigation notes for developers. The content is educational but includes potentially dangerous exploit techniques and a disclaimer.

🚀 Service construit par Johan Denoyer