Propaganda¶

This pages lists various mentions, articles, usages and presentations about Snuffleupagus.

Mentions¶

2017¶

Habr - PHP-Дайджест № 118 – свежие новости, материалы и инструменты (ru) - Habr
Intrinsec’s blog - Hack.lu 2017 (fr) - Intrinsec’s blog
Paragon Initiative Enterprises Blog - The 2018 Guide to Building Secure PHP Software

2018¶

Habr - PHP-Дайджест № 138 (ru) - Habr
PhpStorm’s blog - PHP Annotated Monthly - PhpStorm’s blog
PHP Weekly
New variant in wp-gdpr-compliance vulnerability and fixing it with virtual patching - alertot

2019¶

PhpStorm’s blog - PHP Annotated - PhpStorm’s blog
Habr - PHP-Дайджест № 160 (ru) - Habr

2020¶

Modern PHP Security Part 2: Breaching and hardening the PHP engine - Detectify’s blog

2021¶

Habr - PHP Дайджест № 196 (ru) - Habr
OWASP’s PHP Configuration Cheat Sheet - OWASP

2022¶

RCE on Spip and Root-Me, v2! - Laluka’s blog

Articles¶

2017¶

Killing php bug classes at berlinsides - dustri.org
Snuffleu…what? - fr33tux.org
Behold the Snuffleupagus - memze.ro
How to harden AdwCleaner’s web backend using PHP - Malwarebyte’s blog
First release of Snuffleupagus - dustri.org
PHP Magazine - phpmagazine.net

2018¶

Snuffleupagus 0.3.0 - Dentalium elephantinum - dustri.org
Snuffleupagus version 0.3.0 - Dentalium elephantinum (fr) - LinuxFr

2019¶

Проект Snuffleupagus развивает PHP-модуль для блокирования уязвимостей (ru) - opennet.ru
What the f*ck is a Snuffleupagus? - Living The Dream
Snuffleupagus: Open source security tool hardens PHP sites against cyber-attacks - The Daily Swig
Snuffleupagus, an excellent module to block vulnerabilities in PHP applications - linuxadictos.com
Snuffleupagus versus recent high-profile vulnerabilities - dustri.org

2020¶

Snuffleupagus, un excelente módulo para bloquear vulnerabilidades en aplicaciones PHP (es) - linuxadictos.com
Выпуск Snuffleupagus 0.5.1, модуля для блокирования уязвимостей в PHP-приложениях (ru) - opennet.ru
Snuffleupagus versus recent high-profile vulnerabilities, again! - dustri.org
Snuffleupagus, módulo para bloquear vulnerabilidades en aplicaciones PHP - (es) - underc0de.org

2021¶

Sortie de Snuffleupagus 0.7.0 - Los Elefantes (fr) - linuxfr
Virtual patching CVE-2021-29447 with Snuffleupagus - dustri.org

2022¶

Lightweight post-exploitation hardening in PHP via call-site freezing and ghetto-CFI with Snuffleupagus - dustri.org
Increasing PHP security with Snuffleupagus - blog.frehi.be

Papers¶

Sécurisez vos applications php avec Snuffleupagus (fr) (paywall) - 2018-03-2018

Notable users¶

AdwCleaner’s backend- a notorious anti-pup
Alertot - a Chilean continuous web security monitoring company
Control Web Panel - a free modern and intuitive control panel for servers and VPS
Mailu - mail server as Docker images
Mangadex - a major manga website
NBS System - a French hosting/security company and author of snuffleupagus
Net4All - a Swiss hosting company
Oceanet Technology - a French hosting company
The Swedish team of the NATO’s CCDCOE Locked Shields exercise, winner of the 2021 and 2023 editions.
SwissCenter - a Swiss datacenter & web hosting company
Toolslib - an Alexa top 10k website
cPanel - one of the most popular web hosting control panel