What does it do?
It is a single-file Python script that reproduces the request sequence from a Steal My Bitcoin CTF run, building the requests itself and recording the HTTP bytes. [1] It causes PHP to hit its memory limit, uses the resulting stale state to leak heap and code addresses, then sends a forged PHP structure so cleanup calls zif_system, PHP's handler for system. [2a][2b] A concrete use is running it against a lab endpoint or the challenge to reproduce the callback and check for execution markers such as a nonce, id output, and print-flag hash. [3a][3b][3c]
Activity, over time
Daily observations from the public event archive.
Attention
Daily stars & forks
Star accumulation
Cumulative stars
Pull requests
Daily opens & merges
Conversations
Daily issues & comments
Community
Daily accounts & reviews
Releases
Daily releases
Trending history
Daily top 10 · last 90 days · UTC
Latest stargazers
The last 10 distinct accounts we observed this year.
Most active participants
PR, issue, comment & review events in the past year.
Packages
README badges
Embed a badge in your README or website.
