yangyangwithgnu/bypass_disablefunc_via_LD_PRELOAD

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1171 stars · 279 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A small PHP exploit script plus compiled shared object that bypasses PHP's disable_functions restriction to execute OS commands via LD_PRELOAD environment variable hijacking, without requiring /usr/sbin/sendmail. It is a red-team/pentest utility for exploiting misconfigured PHP servers.

Use cases

• bypass php disable_functions to run system commands
• execute commands from a webshell when exec functions are disabled
• ld_preload shared object hijacking on php servers
• pentest php app where system exec shell_exec are disabled
• bypass disable_functions without sendmail installed

When to choose

• you are doing authorized penetration testing on a PHP host with disable_functions enabled
• the target lacks /usr/sbin/sendmail so classic mail()-based bypasses fail
• you need a lightweight two-file exploit (php + .so) with no dependencies

When to avoid

• you are a defender looking for hardening guidance rather than an exploit
• the target is not PHP or does not allow putenv()
• you need a maintained, licensed tool - it has no license and infrequent updates

Facets

cli-tool · maturity maintenance

security penetration-testing reverse-engineering security penetration-testing web-development cli php ld-preload webshell disable-functions red-team privilege-escalation exploit linux web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yangyangwithgnu/bypass_disablefunc_via_LD_PRELOAD")