PHP Insecure Deserialization using phpggc
Insecure Deserialization in PHP using phpggc/ prebuilt gadget chains. Did the lab already one time before the video but video but was 1h+ couse of fucking up the syntax not using exec to invoke rm when creating the PHP object, so redid it. Finding a non custom Insecure Deserialization in a BBP is more or less impossible but should be pretty common in the wild. Also if you're able to find server side source code and find they using any magic methods youre in luck. Also a serialized PHP object is easy to understand, but ex Ruby is pain. Imagine back in the day when JSON/the ticking time bomb format didn't exist atleast wasn't a standard like to day, before it was either ex XML, (which introduced XXE) or text (introduced XSS) or ex this way to transport data (even tho its mainly used for ex session management and not to transport data unlike JSON), but now JSON is everywhere and all you can do is tops inject a variable and value with no way of escaping the array and 0 impact, ok abit rough i guess JSON can be good sometimes in ex a GET request changed to POST in body or JSON and type-juggling etc. Anyway #bugbountytips for the day:
1st: crawl the domain having set a header X-HTTP-Method-Override: PUT and body ex PHP reverse shell
2nd: on a 302 redirect you possibly have reflection in Location response header go for XSS
3rd: in ex a blog directory with posts ex /blog?id=23 dont break the context with ex " for SQL injection do /blog?id=23 union select 1# etc
4th: DOM XSS is possible in 404 page in path aswell in PHP
5th: use ex gau or waybackurls and grep for emails and see if endpoint still leaking PII data.
github: https://github.com/a6thmfsin
phpggc: https://github.com/ambionics/phpggc/t...
In questa pagina del sito puoi guardare il video online PHP Insecure Deserialization using phpggc della durata di ore minuti seconda in buona qualità , che l'utente ha caricato 0xgreyhound 17 aprile 2024, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 538 volte e gli è piaciuto 5 spettatori. Buona visione!
