Demonstrating a vulnerability is not developing an exploit
There's a significant difference between demonstrating a vulnerability and developing an exploit that can overcome the security protections found in real-world environments
on PHP2Shell proof-of-concept exploits
S
Spencer McIntyreVulnCheck · director of exploit development