← Today's brief

Security · Updated 25 Oct, 02:00 am IST

Hacker News post offers $500 Bitcoin if you exploit a PHP server

Why it matters for readers: It's a simple challenge you can follow or watch to see how a real exploit is found and fixed.

  • A Show HN submission titled 'Steal My Bitcoin' offers a bitcoin key worth about $500 on a server.1
  • The key is accessible to the PHP user account through a binary named print-flag.1
  • The PHP version running on the server was chosen from before the PHP2SHELL CVEs were released, according to the post.1
  • The post frames the challenge as a first-to-find contest and suggests donating the money if the finder doesn't need it.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started