https://strangek.vercel.app/blog A blog exclusively dedicated to my CTF write-ups, discoveries and related content. en-us kkomailzaidi23@gmail.com@gmail.com (Kumail Zaidi) kkomailzaidi23@gmail.com@gmail.com (Kumail Zaidi) Sun, 01 Nov 2026 00:00:00 GMT https://strangek.vercel.app/blog/writeups/hitcon-26/php2shell-real https://strangek.vercel.app/blog/writeups/hitcon-26/php2shell-real Rebuilding php2shell against randomized Nginx/PHP-FPM and Apache/WordPress targets, from a stale decoder and heap leak to a webroot write. Sun, 01 Nov 2026 00:00:00 GMT kkomailzaidi23@gmail.com@gmail.com (Kumail Zaidi) hitconwebphpphp-fpmwordpressheaprcewriteup