News for hackers. Stuff that matters.

A comment on PHPMailer Exploit – Remote Code Execution. Parent comment

Re:PHPMailer Exploit – Remote Code Execution by arasx on Wednesday December 28, 2016 @11:35AM (#13271608)
There are hundreds of ready made libraries which help you easily talk to SMTP without invoking a shell cmd. You also have the option to use sock functions (fsockopen) and write your connection wrapper. These are not windows-only features.
[ Parent | on HN ]
Re:PHPMailer Exploit – Remote Code Execution by throwanem on Wednesday December 28, 2016 @11:44AM (#13271680)
Of course. The part I still can't get my head around is where the language feature that'd relieve me of the need to vet a library, or worse write socket code by hand like some kind of barbarian, isn't compiled in for non-Windows platforms, because reasons.
[ Parent | on HN ]
Re:PHPMailer Exploit – Remote Code Execution by Piskvorrr on Thursday December 29, 2016 @05:43AM (#13276662)
¯\_(ツ)_/¯ PHP. This is one of the insane decisions made in PHP4 that stays there because it's always been there.
[ Parent | on HN ]