Nicheloom visits: 37,555 all-time · 9,603 in the last 7 days

The opportunity tracker for new startups.

Today: 1,401 launches · Niche of the day: giveaway and sweepstakes platforms · See what launched today →

Steal My Bitcoin

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Read the full description

Made this because I'm curious if anyone out there has figured out how to actually use this PHP RCE we spent the last few days panicking over. Have fun!

Visit website ↗ Source listing ↗

HN · launched Oct 24, 2026 · 622 upvotes (top 1%)

Similar launches

See all 389 similar launches →

Could you build this?

No The description frames this as a tool for exploiting a PHP remote code execution vulnerability to steal Bitcoin, which is a theft tool rather than a legitimate product.

What it would actually take: Not provided. The stated goal is unauthorized access to others' funds, so I won't outline how to build it.

Discussion

20 comments analyzed.

Concerns raised: Unproven RCE claim with no verifiable evidence, Signing key could be held on a separate server, Append-only log could be cleaned after the fact, 1MB upload limit suggests the target rejects the exploit payload, Test setup not representative of a real PHP app

Competitors

Other products that read as similar to this one : 389 launches clear the similarity bar, closest 8 shown.

Attention rank: #2 of 390 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 358 days after the earliest competitor.

Other launches for this product