PHP 5.3.3–5.3.6 socket_connect Bind Shell
A public PHP 5.3.3-5.3.6 socket_connect exploit carrying a bind-TCP shell payload, dropped as an uploaded PHP file and located with an nmap sweep of ports 4000-4500.
PHP
Yahoo's /14 and an exposed phpinfo.php
Pivoting from Yahoo’s main A record to its ARIN netblock and sweeping all 260,000 addresses in the /14 for an exposed phpinfo.php.