Security researcher claims $2,000 Bitcoin bounty by exploiting PHP2Shell bug

A security researcher, operating under the alias KillaBoi, successfully exploited vulnerabilities on an intentionally unpatched PHP server and won a Bitcoin bounty valued at $2,021.22. The feat was accomplished in just over 19 hours and served as a real-world demonstration of recent critical PHP2Shell flaws. The exploit took place on Stealmybitcoin.com, a website designed to test the severity of PHP2Shell security holes. The site confirmed that the bounty was collected, logging the win at 15:47 UTC on October 25. The prize consisted of 0.02511679 BTC, offered to anyone able to breach the vulnerable system.