@eplus

Researcher

Joined January 2025
  • Tweets1.3K
  • Following76
  • Followers355
56Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @trythreews @cz_binance
please CZ
62
xitter.cf/mopman/status/21130761…
mopman@mopmanOct 22
Replying to @lcfr_hax
@lcfr_hax Where does one go next after "bug so big it made the prime minister of Japan talk about php"? How do you top that?
7
xitter.cf/mopman/status/21130761…
swarmsy@swarmingedOct 22
Replying to @swarminged
The official report linking @lcfr_hax Github solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
1
40
The official report linking @lcfr_hax Github solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
5
1
10
263
Replying to @swarminged @lcfr_hax @calif_io
The official report linking his Github github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
3
4
48
Replying to @swarminged @lcfr_hax @calif_io
nsa.gov/Press-Room/Press-Rel…

NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities

FORT MEADE, Md. — PHP — short for PHP: Hypertext Preprocessor — works on most major operating systems.  It runs directly on web servers and can be added into HTML to create

nsa.gov
1
3
3
42
Replying to @swarminged @lcfr_hax @calif_io
Governments offline. Internet scrambling. And the guy who created PHP2SHELL is @lcfr_hax This isn't a minor vuln, this is something that will be in the news for weeks to come. We have the literal NSA talking about PHP2SHELL
1
3
3
74
Replying to @swarminged @lcfr_hax
Viral confirmation from one of the most respected in the industry @calif_io “@lcfr_hax was the first to discover php2shell and develop a working exploit… His work convinced the PHP Foundation to invest in fixing this entire bug class.” xitter.cf/calif_io/status/211291…
Calif
@calif_ioOct 21
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
1
3
1
4
350
PHP powers approximately 69–72% of all websites with a known server-side programming language, according to recent 2026 data from W3Techs. @lcfr_hax is listed as a Reporter. That same GitHub has the 100% Claim Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
1
4
9
172
۟ retweeted
۟@eplusAug 3
got my step dad bullish on solana:FeMbDoX7R1Psc4GEcvJdsbNbZA3bfztcyDCatJVJpump
5
7
41
1,257
Replying to @swarminged @lcfr_hax
awesome find
20
github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
1
2
61
Replying to @trythreews @lcfr_hax
legend
1
3,789
Replying to @lcfr_hax
Let’s set the record straight. @lcfr_hax was the first to discover php2shell and develop a working exploit. His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
7
21
4
520
88,567
Replying to @SperaxUSD @OpenAI @CoinMarketCap
🦾
3
12
195
Sperax Partners with @OpenAI: Bringing Safe AI Agents to DeFi published on @CoinMarketCap coinmarketcap.com/community/…

Sperax Partners with OpenAI: Bringing Safe AI Agents to DeFi: Guest Post by nich | CoinMarketCap

Sperax announces that SperaxOS, its AI agent workspace for crypto and DeFi, is now an OpenAI Select Partner, with guarded agent tools and x402 payments settled in USDs.

coinmarketcap.com
5
11
1
30
1,484
Replying to @SperaxUSD @OpenAI @CoinMarketCap
One of Arbitrum's longest-running DeFi teams just had SperaxOS named an OpenAI Select Partner. USDs has been on Arbitrum since 2021, and the $SPA buyback burns there too: 756 burns, ~9.88M SPA, all on Arbiscan. Real usage on Arbitrum, burning real supply.
3
122
My idle stables sit in USDs and earn auto-yield with no staking or claiming. Now SperaxOS, an OpenAI Select Partner, lets agents hold and pay in USDs too. More USDs in use means more protocol revenue, and that revenue buys and burns $SPA. ~9.88M burned so far.
Sperax | SperaxOS
@SperaxUSDOct 14

Sperax is now an OpenAI Select Partner

Article · @SperaxUSD
5
159
Agents that move money need guardrails. SperaxOS, now an OpenAI Select Partner, runs a 6-layer guard chain before any on-chain action. The $SPA buyback holds the protocol to the same standard: every burn is public on Arbiscan. 756 so far. Verify, don't trust.
Sperax | SperaxOS
@SperaxUSDOct 14

Sperax is now an OpenAI Select Partner

Article · @SperaxUSD
3
99
Replying to @SperaxUSD
Agents that move money need guardrails. SperaxOS, now an OpenAI Select Partner, runs a 6-layer guard chain before any on-chain action. The $SPA buyback holds the protocol to the same standard: every burn is public on Arbiscan. 756 so far. Verify, don't trust.
1
101
Load more