+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: Breaking PHP’s Garbage Collection and Unserialize (/Thread-Breaking-PHP%E2%80%99s-Garbage-Collection-and-Unserialize)
Breaking PHP’s Garbage Collection and Unserialize - meow - 07-25-2016
Since I'm too lazy to contribute with actual tutorials, in order to make this a "security" forum again, I'm going to be posting stuff like this every now and then.
This is a really interesting read for anyone who's interested in both OS-level exploitation and web exploitation. This is what was used to hack pornhub and gain RCE. Too bad it fell into the hands of white hats...
https://www.evonide.com/breaking-phps-garbage-collection-and-unserialize/
RE: Breaking PHP’s Garbage Collection and Unserialize - Dong - 07-25-2016
(07-25-2016, 07:12 PM)meow Wrote: Since I'm too lazy to contribute with actual tutorials, in order to make this a "security" forum again, I'm going to be posting stuff like this every now and then.
This is a really interesting read for anyone who's interested in both OS-level exploitation and web exploitation. This is what was used to hack pornhub and gain RCE. Too bad it fell into the hands of white hats...
https://www.evonide.com/breaking-phps-garbage-collection-and-unserialize/
I feel like I'm hearing about UAFs being found all over the place recently... Great post.