Steal My Bitcoin CTF PoC
Summary
This README documents a Steal My Bitcoin Capture The Flag PoC, providing a runnable demonstration of a memory-exhaustion and code-execution chain against a local PHP lab. It outlines four stages (health, heap leak, code leak, final callback) and shows how leaks enable forging a HashTable to trigger zif_system, effectively executing a command in PHP. The project includes a compact Python PoC using the standard library and Docker lab steps to reproduce, with notes on reliability and limitations.