php-bypass

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill is designed specifically to bypass PHP security constraints like disable_functions and open_basedir. It provides systematic instructions for escaping the PHP sandbox environment to gain unauthorized access to the host file system and system-level functionality.
  • [COMMAND_EXECUTION]: Multiple methods are provided to execute arbitrary system commands despite PHP restrictions. These include using FFI::cdef to call libc system(), leveraging pcntl_exec() for process replacement, and hijacking execve() calls via environment variables.
  • [DYNAMIC_EXECUTION]: The skill includes instructions to write C source code to the target system and compile it into a shared library (.so) using gcc at runtime. This library is then loaded via LD_PRELOAD to facilitate process hijacking.
  • [REMOTE_CODE_EXECUTION]: The skill references external, unverified GitHub repositories for downloading Use-After-Free (UAF) exploit scripts targeting specific PHP versions to achieve command execution when standard bypasses fail.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 04:24 AM