Completed
Difference from "unserialize()"
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
It's a PHP Unserialization Vulnerability Jim, but Not as We Know It
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 What is PHP (un)serialization?
- 3 Introduction
- 4 Stream Wrappers
- 5 Basic Attack Methodology
- 6 Difference from "unserialize()"
- 7 Phar File Format
- 8 Phar/Tar File Format
- 9 Quick Polyglot Demo
- 10 Phar Planting
- 11 Identifying Vulnerabilities
- 12 PHPGGC / PHARGGC Payloads
- 13 Case Studies
- 14 Case Study B - Wordpress - Payload
- 15 Case Study C-TCPDF (via Contao)
- 16 Defence
- 17 Take aways
