PHP Insecure Deserialization using phpggc
Insecure Deserialization in PHP using phpggc/ prebuilt gadget chains. Did the lab already one time before the video but video but was 1h+ couse of fucking up the syntax not using exec to invoke rm when creating the PHP object, so redid it. Finding a non custom Insecure Deserialization in a BBP is more or less impossible but should be pretty common in the wild. Also if you're able to find server side source code and find they using any magic methods youre in luck. Also a serialized PHP object is easy to understand, but ex Ruby is pain. Imagine back in the day when JSON/the ticking time bomb format didn't exist atleast wasn't a standard like to day, before it was either ex XML, (which introduced XXE) or text (introduced XSS) or ex this way to transport data (even tho its mainly used for ex session management and not to transport data unlike JSON), but now JSON is everywhere and all you can do is tops inject a variable and value with no way of escaping the array and 0 impact, ok abit rough i guess JSON can be good sometimes in ex a GET request changed to POST in body or JSON and type-juggling etc. Anyway #bugbountytips for the day:
1st: crawl the domain having set a header X-HTTP-Method-Override: PUT and body ex PHP reverse shell
2nd: on a 302 redirect you possibly have reflection in Location response header go for XSS
3rd: in ex a blog directory with posts ex /blog?id=23 dont break the context with ex " for SQL injection do /blog?id=23 union select 1# etc
4th: DOM XSS is possible in 404 page in path aswell in PHP
5th: use ex gau or waybackurls and grep for emails and see if endpoint still leaking PII data.
github: https://github.com/a6thmfsin
phpggc: https://github.com/ambionics/phpggc/t...
Auf dieser Seite können Sie das Online-Video PHP Insecure Deserialization using phpggc mit der Dauer stunde minuten sekunde in guter Qualität ansehen, das der Benutzer 0xgreyhound 17 April 2024 hochgeladen hat, den Link mit Freunden und Bekannten teilen, dieses Video wurde auf Youtube bereits 538 Mal angesehen und es wurde von 5 den Zuschauern gefallen. Viel Spaß beim Betrachtenden Zuschauern gefallen!
