PHP Insecure Deserialization using phpggc
Insecure Deserialization in PHP using phpggc/ prebuilt gadget chains. Did the lab already one time before the video but video but was 1h+ couse of fucking up the syntax not using exec to invoke rm when creating the PHP object, so redid it. Finding a non custom Insecure Deserialization in a BBP is more or less impossible but should be pretty common in the wild. Also if you're able to find server side source code and find they using any magic methods youre in luck. Also a serialized PHP object is easy to understand, but ex Ruby is pain. Imagine back in the day when JSON/the ticking time bomb format didn't exist atleast wasn't a standard like to day, before it was either ex XML, (which introduced XXE) or text (introduced XSS) or ex this way to transport data (even tho its mainly used for ex session management and not to transport data unlike JSON), but now JSON is everywhere and all you can do is tops inject a variable and value with no way of escaping the array and 0 impact, ok abit rough i guess JSON can be good sometimes in ex a GET request changed to POST in body or JSON and type-juggling etc. Anyway #bugbountytips for the day:
1st: crawl the domain having set a header X-HTTP-Method-Override: PUT and body ex PHP reverse shell
2nd: on a 302 redirect you possibly have reflection in Location response header go for XSS
3rd: in ex a blog directory with posts ex /blog?id=23 dont break the context with ex " for SQL injection do /blog?id=23 union select 1# etc
4th: DOM XSS is possible in 404 page in path aswell in PHP
5th: use ex gau or waybackurls and grep for emails and see if endpoint still leaking PII data.
github: https://github.com/a6thmfsin
phpggc: https://github.com/ambionics/phpggc/t...
Sur cette page du site, vous pouvez voir la vidéo en ligne PHP Insecure Deserialization using phpggc durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur 0xgreyhound 17 avril 2024, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 538 fois et il a aimé 5 téléspectateurs. Bon visionnage!
