Collected research

Abusing PHP Sockets

Rodrigo Marcos · secforce.co.uk

PHP's socket_set_option with SO_REUSEADDR binds a listener to a port Apache already holds: Apache listens on 0.0.0.0 and is not built with SO_EXCLUSIVEADDRUSE, and Windows gives the specific local interface precedence, making the hijack reliable. The attacker then answers every client — DoS, defacement, bind shell, man-in-the-middle.

Record

Researcher

Rodrigo Marcos

Published by

secforce.co.uk

Format

Whitepaper

Topic

Server

In the archive

• Collected in the 2008 research round

Related sources

• Tool
• SECFORCE :: Research

Tags

• php
• rce
• dos
• abuse-of-functionality
• privilege-escalation
• owasp-a01-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Rodrigo Marcos, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 6 August 2026.