UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Pentester Jaydip Modhwadia, known as 'Killa,' claimed a $2,000 Bitcoin prize by achieving Remote Code Execution (RCE) on a website in a capture-the-flag contest designed to demonstrate the real difficulty of exploiting PHP2Shell vulnerabilities. The challenge was launched by security researcher James Pavur on October 24 with an initial $500 prize, which the community increased to $2,000. Modhwadia exploited the vulnerability in under three hours, though the website initially displayed incorrect timing.
Key points
- UK pentester demonstrated RCE via PHP2Shell exploit
- Won $2,000 Bitcoin prize in James Pavur's CTF challenge
- Exploit successful despite initial CTF setup issues
- Challenge intended to test real-world PHP2Shell exploit difficulty
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
