<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url><loc>https://php2shell.run/</loc><changefreq>daily</changefreq><priority>1.0</priority></url>
  <url><loc>https://php2shell.run/category/vulnerabilities</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/exploitation</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/defense</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/category/testing</loc><lastmod>2026-10-22</lastmod><changefreq>daily</changefreq><priority>0.7</priority></url>
  <url><loc>https://php2shell.run/series</loc><changefreq>weekly</changefreq><priority>0.6</priority></url>
  <url>
    <loc>https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/php2shell-suricata-falco-detection-rules</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/aslr-bypass-without-info-leak-distro-matrix" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/in-the-wild-weaponized-chains-and-honeypot-telemetry" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/source/inside-php-core-uaf-rfc1867-analysis" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/source/inside-php-core-uaf-rfc1867-analysis" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-cve-2026-109618-109619-advisory" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-cve-2026-109618-109619-advisory" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-emergency-mitigation-patch-guide" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-emergency-mitigation-patch-guide" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/architecture/php2shell-heap-grooming-fake-zval-system" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/architecture/php2shell-heap-grooming-fake-zval-system" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-sub-500-bytes-exploit-anatomy" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/php2shell-suricata-falco-detection-rules" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/php2shell-suricata-falco-detection-rules" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/production-defense-playbook-nginx-waf-and-runtime-hardening" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening</loc>
    <lastmod>2026-10-22</lastmod>
    <xhtml:link rel="alternate" hreflang="en" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <xhtml:link rel="alternate" hreflang="zh" href="https://php2shell.run/zh/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <xhtml:link rel="alternate" hreflang="x-default" href="https://php2shell.run/blog/zero-trust-php-fpm-ebpf-and-seccomp-hardening" />
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
</urlset>