<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url><loc>https://php2shell.run/</loc><changefreq>daily</changefreq><priority>1.0</priority></url>
  <url><loc>https://php2shell.run/checker/</loc><changefreq>daily</changefreq><priority>0.9</priority></url>
  <url><loc>https://php2shell.run/wordpress/</loc><changefreq>daily</changefreq><priority>0.9</priority></url>
  <url><loc>https://php2shell.run/cve-2026-109618/</loc><changefreq>daily</changefreq><priority>0.9</priority></url>
  <url><loc>https://php2shell.run/cve-2026-109619/</loc><changefreq>daily</changefreq><priority>0.9</priority></url>
  <url><loc>https://php2shell.run/category/vulnerabilities</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/exploitation</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/defense</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/testing</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/series</loc><changefreq>weekly</changefreq><priority>0.6</priority></url>
  <url>
    <loc>https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-suricata-falco-detection-rules/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening/" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
</urlset>