Collaborate Disseminate
Refrence: https://bugs.php.net/bug.php?id=79037
I read about this bug, it also states usage of code with PHP but how to test a live website with this :
Description:
There is an Undefined Behaviour in libmbfl at mbfl_filt_conv_big5_wchar fu… Continue reading CVE-ID: 2020-7060 : global buffer-overflow in `mbfl_filt_conv_big5_wchar` How to test using this POC [closed]
We have a Laravel 5.6.x application running as a REST backend with PHP 7 on one of our servers. The server uses CentOS with WHM/cPanel/PhpMyAdmin
Recently that server issued a maldet warning (our malware detector) after it saw some strange… Continue reading Identifying Source of Malware Attack on Laravel App
I am making 100+ bug bounty tutorials in my channel
hello guys,
I have been working as a cyber security engineer for the last 15 years and decided to make easy YouTube videos for most of QA guys to learn 200+ security issues in 30 hours.
I… Continue reading Free Bug Bounty Tutions 100+ lessons – Suggestions Needed [closed]
I have a free infinityfree.net web server that was vulnerable to CVE-2017-12419 for quite a big window of time.
After fixing the gap and changing the passwords, what are some ways to detect if the server has been intruded?
Is it true that … Continue reading Ways to detect CVE-2017-12419 intrusion
I am new to SQL injections, and people on Reddit asked me do the portswigger labs. Which I did up till before 2nd order ones. So I am pretty comfortable with usual SQL injections.
Now I have myself made a PHP website using mysqli extensio… Continue reading Having problems with SQL injection with mysqli extension PHP
Currently running a vulnerability assessment. However, the IP I was provided is a load balancer and the client only wants to test one of the sites running on the load balancer. The vulnerabilities I have found are all PHP related. How can … Continue reading Is there any quick or automated to way to check the version of PHP running on a remote server?
I know that PHP used the system implementation for its rand() function, which is usually a weak LCG or LFSR implementation. Did this change?
In case it still does, I am using Fedora 32.
PHP states in its documentation that rand() does not… Continue reading Did PHP’s rand() get better?
I’m new here to ask a question. Sorry if my question had miss explanation. I just wanna ask if my PHP code is secure enough. Please find below is the source code:
Get the ID for choosing the Value
/*Create a new Query for get all … Continue reading Is my code safe enough to be publish on the server side? [duplicate]
I have to do an assignment for a penetration testing exam but I’m a little bit stuck.
Among all the vulnerabilities, I have to inject an upload form but it behaves oddly. If I upload a file (even an image or similar) it does not do anythi… Continue reading Stuck with injecting upload form [closed]
Today I saw a snippet a code for authentication logic :
function checkPass($pass, $login){
$inputedPass = $pass;
$req = $bdd->prepare(‘SELECT password FROM agents WHERE password = MD5(?) AND ID = ?;’);
$req->bindP… Continue reading Explaining a bad approach – not comparing hashes