Kirill Firsov
@k_firsov
Oct 20
php2shell

Tomorrow is a helluva day.

Oct 20, 2026 · 8:27 PM UTC

274
1,826
16,170
3,682,792
Kirill Firsov
@k_firsov
Oct 20
Replying to @k_firsov
The credit for this video/exploit goes to @lcfr_hax and @calif_io
6
6
298
225,359
Kirill Firsov
@k_firsov
Oct 20
Replying to @k_firsov
Whoever is affected (you), please check this regularly for the next 12 hours php.net/archive/2026.p…
1
15
309
211,790
Kirill Firsov
@k_firsov
Oct 21
Replying to @k_firsov
The exploit int the wild now. I won't publish it here, DYOR. Let's just enjoy the upcoming day, we must have some interesting titles in the news.
1
5
282
158,933
Kirill Firsov
@k_firsov
Oct 21
Replying to @k_firsov
Temporaly mitigation

php.ini: session.upload_progress.enabled = Off

UPGRADE TO THE LATEST PHP after 2pm UTC
9
29
348
127,568
Kirill Firsov
@k_firsov
Oct 21
Replying to @k_firsov
PHP just released patches. Upgrade asap
2
3
88
61,871
RepliesRelevant
vx-underground
@vxunderground
Oct 20
Replying to @k_firsov
@k_firsov WHY THE DANCING ANIME LADY
42
4
765
114,552
Kirill Firsov
@k_firsov
Oct 20
Replying to @vxunderground
@vxunderground I have no idea!
2
0
170
103,912
Ome Mishra (D3.Hack3r)@ome_mishra
Oct 20
Replying to @k_firsov
@k_firsov Hope it will break the Log4j record 😅😅😅😅
3
0
85
96,633
Kirill Firsov
@k_firsov
Oct 20
Replying to @ome_mishra
@ome_mishra I haven't checked the stats lately but I believe there are more php apps than java.
3
0
97
88,039
uglybyte
@uglybyte
Oct 20
Replying to @k_firsov
@k_firsov That’s gonna be ugly
3
0
40
63,546
Kirill Firsov
@k_firsov
Oct 20
Replying to @uglybyte
@uglybyte That's gonna be uglybyte!
1
0
23
59,772
Andrew "buy the dip" Brown@waunakeesoccer1
Oct 20
Replying to @k_firsov
@k_firsov Apache and Nginx for all frameworks?
1
0
18
61,164
Kirill Firsov
@k_firsov
Oct 20
Replying to @waunakeesoccer1
@waunakeesoccer1 On the video we see both apache and nginx.
1
1
39
56,963
MpFlippy@MpFlippy
Oct 20
Replying to @k_firsov
@k_firsov Are they going to release the tool tomorrow is what you're saying? This is going to be INSANE to watch
1
0
24
68,348
Kirill Firsov
@k_firsov
Oct 20
Replying to @MpFlippy
@MpFlippy PHP is releasing the patch tomorrow. It's THE PATCH which 10 minutes later will be an exploit in the wild.
Although I believe many are already working on the exploit, just refresh the page :)
3
4
144
64,456
Joe Trecokas@JoeTrec
Oct 20
Replying to @k_firsov
@k_firsov Mitigation possible or only patch?
3
0
3
49,082
Kirill Firsov
@k_firsov
Oct 20
Replying to @JoeTrec
@JoeTrec Nothing, just monitor php.net for the next 12 hours
0
0
16
46,918
ray slash xtc slash mari slash miss narcissist@guyanareaper
Oct 21
Replying to @k_firsov
@k_firsov i dont trust mfs who put that weird ass anime girl gif on anything
10
1
152
50,477
Kirill Firsov
@k_firsov
Oct 21
Replying to @guyanareaper
@guyanareaper You don't need to..
0
1
76
46,218
Memelord.com
@memelord
Oct 21
Replying to @k_firsov
@k_firsov
0
12
103
10,381
Stable@SaneFriend
Oct 21
Replying to @k_firsov
@k_firsov Internet gonna blow up tmrw have fun yall
0
1
38
18,794
P.M
@p_misirov
Oct 21
Replying to @k_firsov
@k_firsov NSA after another RCE gets patched.
0
3
106
18,843
Chicken Rider@odakab54
Oct 20
Replying to @k_firsov
@k_firsov retarded glitch and blur effects on video is making it unwatchable
1
0
104
16,987
Sarah sam@InterStella667
Oct 21
Replying to @k_firsov
@k_firsov The video effect is so cringe, im trying to read whats going on in the console
1
1
55
12,775
GOOD JOB JASON 🍊@HydrogenNGU
Oct 21
Replying to @k_firsov
@k_firsov Everyone panicking about php2shell:

me jamming out to High Forever:
0
0
12
2,788
Anatolij Vasilev@tolik518
Oct 20
Replying to @k_firsov
@k_firsov php2shell from calif.io is not public right?
1
0
4
13,386
Selias@Selias09
Oct 20
Replying to @k_firsov
@k_firsov Looks like the hacker is a fan of @ui_shig lol
0
0
8
8,052
5Q@its5q
Oct 21
Replying to @k_firsov
@k_firsov Did @sansecio just leak the vector in HTML meta keywords?
2
1
41
15,479
sunny@AccessRevoked_
Oct 22
Replying to @k_firsov
@k_firsov actual dork losers are responsible for this
0
0
3
670
𝐂𝐎𝐌𝐌𝐄 𝐝𝐞𝐬 𝐌𝐀Ç𝐎𝐍𝐒@eduardgorte_
Oct 21
Replying to @k_firsov
@k_firsov Meanwhile, the most famous indie "hacker" and PHP vibecoder:
1
0
26
12,067
Lucas Azevedo@lhs_azevedo
Oct 20
Replying to @k_firsov
@k_firsov What about other SAPIs like fpm?
0
0
6
9,122
Load more