Goblin Mode Luci
@luci@twoot.site
Everyone’s talking about all the websites running php for some reason
No one is talking about all the network appliances with php web UIs running in enterprises across the world that are too old to get a patch but are too critical to replace
If you have one of these devices, you know it’s not getting replaced
This is how you get lateral movement through a network. Not from a website running php and a misconfigured acl letting it break into your private network, but from your stupid physical door access controller that happens to be accessible from the guest wifi or a dvr your “security company” installed and needs port forwarding on
It’s not just about patching, it’s about understanding your weaknesses