php-bypass
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill is designed specifically to bypass PHP security constraints like
disable_functionsandopen_basedir. It provides systematic instructions for escaping the PHP sandbox environment to gain unauthorized access to the host file system and system-level functionality. - [COMMAND_EXECUTION]: Multiple methods are provided to execute arbitrary system commands despite PHP restrictions. These include using
FFI::cdefto call libcsystem(), leveragingpcntl_exec()for process replacement, and hijackingexecve()calls via environment variables. - [DYNAMIC_EXECUTION]: The skill includes instructions to write C source code to the target system and compile it into a shared library (
.so) usinggccat runtime. This library is then loaded viaLD_PRELOADto facilitate process hijacking. - [REMOTE_CODE_EXECUTION]: The skill references external, unverified GitHub repositories for downloading Use-After-Free (UAF) exploit scripts targeting specific PHP versions to achieve command execution when standard bypasses fail.
Recommendations
- AI detected serious security threats
Audit Metadata