PHP Insecure Deserialization using phpggc
Insecure Deserialization in PHP using phpggc/ prebuilt gadget chains. Did the lab already one time before the video but video but was 1h+ couse of fucking up the syntax not using exec to invoke rm when creating the PHP object, so redid it. Finding a non custom Insecure Deserialization in a BBP is more or less impossible but should be pretty common in the wild. Also if you're able to find server side source code and find they using any magic methods youre in luck. Also a serialized PHP object is easy to understand, but ex Ruby is pain. Imagine back in the day when JSON/the ticking time bomb format didn't exist atleast wasn't a standard like to day, before it was either ex XML, (which introduced XXE) or text (introduced XSS) or ex this way to transport data (even tho its mainly used for ex session management and not to transport data unlike JSON), but now JSON is everywhere and all you can do is tops inject a variable and value with no way of escaping the array and 0 impact, ok abit rough i guess JSON can be good sometimes in ex a GET request changed to POST in body or JSON and type-juggling etc. Anyway #bugbountytips for the day:
1st: crawl the domain having set a header X-HTTP-Method-Override: PUT and body ex PHP reverse shell
2nd: on a 302 redirect you possibly have reflection in Location response header go for XSS
3rd: in ex a blog directory with posts ex /blog?id=23 dont break the context with ex " for SQL injection do /blog?id=23 union select 1# etc
4th: DOM XSS is possible in 404 page in path aswell in PHP
5th: use ex gau or waybackurls and grep for emails and see if endpoint still leaking PII data.
github: https://github.com/a6thmfsin
phpggc: https://github.com/ambionics/phpggc/t...
En esta página del sitio puede ver el video en línea PHP Insecure Deserialization using phpggc de Duración hora minuto segunda en buena calidad , que subió el usuario 0xgreyhound 17 abril 2024, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 538 veces y le gustó 5 a los espectadores. Disfruta viendo!
