[meow]

Since I'm too lazy to contribute with actual tutorials, in order to make this a "security" forum again, I'm going to be posting stuff like this every now and then.

This is a really interesting read for anyone who's interested in both OS-level exploitation and web exploitation. This is what was used to hack pornhub and gain RCE. Too bad it fell into the hands of white hats...

https://www.evonide.com/breaking-phps-ga...serialize/

[Dong]

Since I'm too lazy to contribute with actual tutorials, in order to make this a "security" forum again, I'm going to be posting stuff like this every now and then.

This is a really interesting read for anyone who's interested in both OS-level exploitation and web exploitation. This is what was used to hack pornhub and gain RCE. Too bad it fell into the hands of white hats...

https://www.evonide.com/breaking-phps-ga...serialize/

I feel like I'm hearing about UAFs being found all over the place recently... Great post.