Skip to content
Ferroscope
Menu

30 minutes · if you terminate traffic

Web server emergency

PHP2Shell, NGINX, and HTTP/3 all land on the same surface. Patch, cap, and remove what you do not need.

Next · Device update pass
4 steps30 minno tools required

The procedure

  1. Step 01 · 5 min

    Inventory what is actually listening

    You cannot patch a service you forgot you run.

  2. Step 02 · 12 min

    Patch PHP and NGINX to fixed branches

    Use the distribution packages, not a source build you will forget.

  3. Step 03 · 4 min

    Disable HTTP/3 until the QUIC fixes are confirmed

    It is a valid temporary mitigation for a single-connection crash.

  4. Step 04 · 9 min

    Remove or firewall admin panels

    The internet does not need your dashboard.