漏洞公开让攻防双方同时起跑
这就是这次的风险所在：漏洞在修复方案发布前就公开了，所以攻防双方同时起步。攻击者并没有等待可用的漏洞利用程序。他们正在编制一份名单，列出互联网上所有声称运行 PHP 的服务器，并按版本排序；一旦修复方案发布，他们就会对比旧代码和新代码来找出漏洞。
English original
That’s the risk with this one: the flaws became public before the fix did, so both sides are starting at the same time. Attackers aren’t waiting for a working exploit. They’re building a list of every server on the internet that says it runs PHP, sorted by version, and the moment the fix is out, they will compare the old code with the new one to find the flaw,
PHP2Shell漏洞响应
J
Joviane JardimDetectify · senior security researcher