PHP 8 disable_functions bypass PoC
PHP 8 Sandbox Escape. Contribute to m0x41nos/TimeAfterFree development by creating an account on GitHub.
PHP 8 disable_functions bypass PoC launched on March 3, 2026 with 29 votes, #787 of 23,380 launches that month and more than 95% of that year's launches.
In plain words
PHP 8 disable_functions bypass PoC is a proof-of-concept tool for PHP developers and security researchers. It demonstrates how to work around PHP's disable_functions directive in PHP 8. The tool is hosted on GitHub and is designed for educational and testing purposes to understand potential security vulnerabilities in PHP configurations.
written from the facts on this page · September 2026
From the sources
PHP 8 sandbox escape PoC demonstrating a disable_functions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disable_functions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives utilize the DateInterval object. The PoC was tested across multiple standard PHP distributions and common server APIs (CLI, PHP-FPM, Apache module) and reproduces deterministically. PHP core is memory-unsafe, and memory corruption in typical PHP deployments is exploitable. While some PHP memory corruption issues and exploitation strategies are publicly known, others are not. Relying on sandboxing mechanisms such…from github.com
Does a similar job
all alternatives →
A terminal emulator in pure PHP2025 · github.com · ▲196A terminal renderer written in pure PHP. Contribute to soloterm/screen development by creating an account on GitHub.
PHPunctional, a PHP Functional Programming Library2015 · github.com · ▲37Functional Programming Library For PHP. Contribute to r-cyr/PHPunctional development by creating an account on GitHub.
Rust compiler in PHP emitting x86-64 executablesMar 2026 · github.com · ▲66Hi! I put together a Rust compiler written in PHP. It takes Rust source code and outputs x86-64 Linux binaries directly. No LLVM, no assembler, no linker. It has a working ownership checker, borrow checker, type checker, structs, functions, control flow, and mutable references. The test suite has 80+ cases. The whole thing is around 2,500 lines of PHP.
Functors, Applicative Functors and Monads in PHP2015 · github.com · ▲46Functors, Applicative Functors and Monads in PHP. Contribute to widmogrod/php-functional development by creating an account on GitHub.
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Show HN post ↗
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
Littlebird▲709Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.
AI · Mar 2026 · littlebird.ai
