Came across this wild challenge on Hacker News. A developer set up a live CTF challenge putting $500 (now close to $2000) in BTC on the line to see if anyone can actually exploit that recent PHP RCE everyone has been panicking about.
pull down to refresh
UPDATE: the address has just been drained
https://bitref.com/bc1qlnu50y4zm0nwxkckxu09thn5xdcz8aw6t3cxqy
That's pretty wild. Also, agreed on your other points in your reply.
Meanwhile the real hacker exploits the vuln for $10m+ before anyone else figures it out.
Cool challenge though. It's still a cool idea.
Agreed, but $2000 is good incentive for a lot of security testers in third world countries. What I'm expecting to see is a public playground / testing of wildcard unverified php exploits out there being debunked at the very least. Maybe it will ease up the hysteria a little bit. On the flip-side, if the wallet is claimed, more people will address the issue faster than ever. It is a win anyway you look at it.