UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
19 Articles
19 Articles
Researcher cracks an unpatched PHP server and takes its $2,000 Bitcoin prize in 19 hours
A security researcher was able to exploit an intentionally unpatched PHP server and claim its Bitcoin bounty in just over 19 hours. The public stunt was a test to see if the recent PHP2Shell flaws are as dangerous as they are said to be. Stealmybitcoin.com logged the win at 15:47 UTC on October 25 Stealmybitcoin.com, the site where the game was hosted, verified the bounty had been claimed. Its results page shows the Bitcoin was taken after 19.28…
A researcher identified as Killa violated the Steal My Bitcoin server less than three hours after its operator enabled an accessible PHP page. The case confirmed that the failure could be exploited in that configuration, but did not prove that an autonomous AI would execute the attack and left a practical unknown: the private key saved by the organizer was not the correct one.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium










