Mmastodon BusinessCrypto first seen 1 d ago, last 1 d ago, peak #1
Bitcoin key hidden on server to test PHP flaws
Original: Steal my # Bitcoin There is a bitcoin key hidden on this server worth about $2,014. It is accessible to the PHP user acc
A security researcher has hidden a Bitcoin key worth about $2,014 on a public server, accessible only through a PHP user account via a 'print-flag' binary. The challenge, hosted at stealmybitcoin.com, runs an older PHP version chosen from before recent PHP2SHELL vulnerabilities were disclosed, inviting attackers to exploit those flaws to steal the funds. Commenters are discussing it as a hands-on test of whether the PHP vulnerabilities can be exploited in practice.
Why now: It is a live hacking challenge rewarding anyone who can exploit recently disclosed PHP vulnerabilities to take real Bitcoin.
stealmybitcoin.comPHPBitcoininfosec.exchange
Evidence
- Steal my # Bitcoin There is a bitcoin key hidden on this server worth about $2,014. It is accessible to the PHP user account through the print-flag binary. This # PHP version was selected from before the # PHP2SHELL CVEs were released. https:// stealmybitcoin.com/ · raptor@infosec.exchange · 8
API: https://socialmediatrends-api.osmike.com/v1/trends/3618999