Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

#CVE-2026-109618 PoC #exploit para #php2shell de cosecha propia ejecutado en un entorno controlado XD tras detección con 👇

BTshell🕷

36,466 subscribers

21,587 views • 17 days ago •via X (Twitter)

Science & Technology #CVE #exploit #php2shell

Anya Rossi• Live Now

Private livecam show

11 Comments

Sunturai17 days ago

Nice approach! We have a few KQL detections on Sunturai that might complement your hunt or provide additional investigation pivots. Sharing them here in case they’re useful: Always good to compare detection coverage! 🔎

BTshell🕷17 days ago

Thank 👍

Joel Ccari17 days ago

El repo de la primer terminal?

BTshell🕷17 days ago

Ese de momento y hasta que no se parchee en unos días no lo subo 😜

Joel Ccari17 days ago

😎

Albert @YZ9YT16 days ago

❣️

milad17 days ago

Could you send the php2shell_exploit.py file?

BTshell🕷17 days ago

Not yet—let's wait for the patches to be applied, and then I'll release the exploit. 😜

Albert @YZ9YT17 days ago

🔥🔥🔥

BTshell🕷17 days ago

😜

BTshell🕷17 days ago

Y me vais a decir que los #RollingStones no molan ehn XD joder, pero que viejo soy.

Related Videos

⚠🔴 New PoC for CVE-2026-109618 affecting ALL PHP VERSIONS, EVEN THOSE RECENTLY PATCHED

⚠🔴 New PoC for CVE-2026-109618 affecting ALL PHP VERSIONS, EVEN THOSE RECENTLY PATCHED

Marcos Besteiro 👧🏻👶🏻

62,533 views • 14 days ago

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 views • 9 months ago

‼️ CVE-2026-43503: Python PoC for DirtyClone, a Linux kernel LPE via page-cache corruption exploit GitHub:

‼️ CVE-2026-43503: Python PoC for DirtyClone, a Linux kernel LPE via page-cache corruption exploit GitHub:

Dark Web Informer

21,364 views • 4 months ago

PoC for CVE-2026-47291

PoC for CVE-2026-47291

Omair 🇵🇸

27,941 views • 4 months ago

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026

Dark Web Informer

16,169 views • 9 months ago

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability

Dark Web Informer

51,871 views • 2 years ago

Proof of Concept for CVE-2026-21509 vulnerability, bypassing Windows Defender PoC:

Proof of Concept for CVE-2026-21509 vulnerability, bypassing Windows Defender PoC:

Dark Web Informer

44,778 views • 19 days ago

CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution PoC:

CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution PoC:

Dark Web Informer

119,436 views • 17 days ago

Php2shell-scanner Herramienta para escanear php2shell con 3 métodos: vía URL, localhost, SSH

Php2shell-scanner Herramienta para escanear php2shell con 3 métodos: vía URL, localhost, SSH

elhacker.NET

39,186 views • 15 days ago

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:

DarkShadow

15,727 views • 9 months ago

"El equipo que ha controlado el rebote, ha controlado el partido". "Hemos hecho un gran partido, un partido muy serio". ⚪️ Sergio Scariolo, con Milena Martín tras llevarse el Clásico de #EuroLeague.

"El equipo que ha controlado el rebote, ha controlado el partido". "Hemos hecho un gran partido, un partido muy serio". ⚪️ Sergio Scariolo, con Milena Martín tras llevarse el Clásico de #EuroLeague.

Basket en Movistar Plus

19,913 views • 9 months ago

PatchaPalooza now shows exploit & detection coverage for every CVE. - Exploit coverage (VulnCheck, GitHub PoC, Nuclei, Metasploit) - Detection coverage (Sigma, YARA from 40+ repos) 12,500+ Microsoft CVEs enriched. All free, all open. Example:

PatchaPalooza now shows exploit & detection coverage for every CVE. - Exploit coverage (VulnCheck, GitHub PoC, Nuclei, Metasploit) - Detection coverage (Sigma, YARA from 40+ repos) 12,500+ Microsoft CVEs enriched. All free, all open. Example:

Alex

18,452 views • 8 months ago

Mujer es sorprendida con una propuesta de matrimonio en un entorno paradisíaco, con un atolón en forma de corazón.

Mujer es sorprendida con una propuesta de matrimonio en un entorno paradisíaco, con un atolón en forma de corazón.

Real Time

351,974 views • 10 months ago

Android 17 root Full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702) Click on the link -> root Android Discovered by NebuSec PoC not available. Info:

Android 17 root Full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702) Click on the link -> root Android Discovered by NebuSec PoC not available. Info:

Mobile Hacker

53,866 views • 4 months ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

95,499 views • 7 months ago

‼️CVE-2026-0740 - Ninja Forms File Uploads up to v3.3.26 - Unauthenticated Arbitrary File Upload PoC:

‼️CVE-2026-0740 - Ninja Forms File Uploads up to v3.3.26 - Unauthenticated Arbitrary File Upload PoC:

Dark Web Informer

24,752 views • 6 months ago

A POC for CVE-2025-55182

A POC for CVE-2025-55182

maple3142

553,290 views • 11 months ago

🇲🇽 El alcalde de Oaxaca se casa con un caimán vestido de novia en un ritual 👉🏼 Esto se trata de un ritual para conseguir atraer lluvia, buena cosecha y alegría 📲 Todos los detalles en #Antena3Noticias

🇲🇽 El alcalde de Oaxaca se casa con un caimán vestido de novia en un ritual 👉🏼 Esto se trata de un ritual para conseguir atraer lluvia, buena cosecha y alegría 📲 Todos los detalles en #Antena3Noticias

Antena 3 Noticias

12,993 views • 4 months ago

En un video escalofriante, Pablo Abel Zarate, alias "El Babas", revela las atrocidades del CJNG en Celaya, solo para ser ejecutado tras sus confesiones. "Mataron gente inocente", denunció antes de ser silenciado.

En un video escalofriante, Pablo Abel Zarate, alias "El Babas", revela las atrocidades del CJNG en Celaya, solo para ser ejecutado tras sus confesiones. "Mataron gente inocente", denunció antes de ser silenciado.

MCN🇸🇦

547,690 views • 1 year ago