What happens when a vulnerability transforms a PHP web application into an entry point for attackers?

In this technical session, we will dissect PHP2Shell (CVE-2026-109618), exploring its root cause, exploitation mechanisms, and potential impact on vulnerable environments.

Through a live proof-of-concept demonstration in a controlled environment, we will walk through the exploitation process, showing how attackers can leverage the vulnerability to compromise affected systems.

Beyond exploitation, we will examine practical detection techniques, mitigation strategies, and defensive measures that security teams can implement to identify and reduce their exposure.

No slides full of theory. Just technical insights, live exploitation, and real-world lessons from an attacker's perspective.