Posts tagged

#legacy-systems

2posts

A frame from @lcfr_hax's PHP2Shell proof-of-concept video: a terminal runs the exploit against a local WordPress 7.1.3 on PHP 8.5, and the browser next to it shows the dropped pwned.txt file

That Time PHP2Shell Ate My Inbox

One email at 13:06, a patch at 17:00 that only covers PHP 8.2 and up, and 500 client sites spread over 25-odd servers, 10 cloud providers and more control panels than I want to count.

Oct 23, 2026

That Time I Learned Banks Still Code Like It's 1975

A journey into the hellscape of fixed-width ASCII files, COBOL, and why your modern web app needs to speak mainframe

Jan 20, 2026