Exploit Zines

Security research, drawn out.

Latest zine

BUGS EXPLAINED / NO LAB COAT REQUIRED
ZINE / 001 ↗Six illustrated panels: PHP request lifecycle, out-of-memory corruption, stale global state, mod_php and FPM differences, impact and fixes.

PHP2Shell

Step through PHP2Shell: memory pressure, unfinished buckets, and state that survives a request.

PHP CORE · 2026-10-31 · FREE

EXPLOIT ANATOMY / 001

Big bugs.
Small words.
Aha moments.

Real bugs, drawn step by step. We follow the request, find the broken assumption, and explain the fix. The memory gremlins get a speaking part.

Read PHP2Shell ↗
request→bug?!→aha!