Lucas Luitjes Blog

Lucas Luitjes is a freelance developer working across development, DevOps and security, and this blog is where he publishes technical write-ups from that practice. Posts tend to focus on specific security questions rather than broad commentary, using concrete artifacts such as proof-of-concept repositories as the starting point for analysis.

The php2shell piece examines why a widely discussed PHP vulnerability has not yet turned into mass exploitation. It walks through the mechanics of the available PoC, including the need to send four consecutive requests to the same PHP worker process and the difficulty of matching an exploit to an exact PHP build, OS version and architecture. It also describes how the PoC saturates the default 150 mod_php workers to pin a target process.

The writing assumes familiarity with web server internals, Docker and exploit development concepts, so it fits security researchers, backend engineers and DevOps practitioners evaluating exposure rather than general readers looking for a plain summary.

Use it as a technical reference when assessing PHP deployment risk or studying exploitation constraints; the author explicitly notes he is not an exploit developer and invites readers to weigh the conclusions accordingly. Posts are occasional and driven by curiosity, so check back rather than expecting a regular schedule.