In this video, would like to showcase another challenge from Snyk capture the flag event that was going on from October 5th to October 7th of 2021. My video showcase #premieres at 9:00 PM IRST (12 PM EST)
https://youtu.be/xCdqK84bngg
https://youtu.be/xCdqK84bngg
YouTube
Steganography Challenges (2/4)
This is the second episode of the Steganography challenges video series.In this video I would like to showcase another challenge from SNYK capture the flag e...
Forwarded from Security Analysis
⭕️ PHP 7.3-8.1 disable_functions bypass using string concatenation
PHP 7.3-8.1 disable_functions bypass [concat_function]This exploit uses a bug in a function that handles string concatenation.
A statement such as $a.$b might result in memory corruption if certain conditions are met.
The bugreport provides a very thorough analysis of the vulnerability.
The PoC was tested on various php builds for Debian/Ubuntu/CentOS/FreeBSD with cli/fpm/apache2 server APIs and found to work reliably.
https://github.com/mm0r1/exploits/tree/master/php-concat-bypass
#PHP #bypass #disable_functions
@securation
PHP 7.3-8.1 disable_functions bypass [concat_function]This exploit uses a bug in a function that handles string concatenation.
A statement such as $a.$b might result in memory corruption if certain conditions are met.
The bugreport provides a very thorough analysis of the vulnerability.
The PoC was tested on various php builds for Debian/Ubuntu/CentOS/FreeBSD with cli/fpm/apache2 server APIs and found to work reliably.
https://github.com/mm0r1/exploits/tree/master/php-concat-bypass
#PHP #bypass #disable_functions
@securation
Forwarded from CTF Community | Hints
Remote Desktop Client / Server on PowerShell
https://github.com/DarkCoderSc/PowerRemoteDesktop
#pentest #redteam #git
https://github.com/DarkCoderSc/PowerRemoteDesktop
#pentest #redteam #git
GitHub
GitHub - PhrozenIO/PowerRemoteDesktop: Remote Desktop entirely coded in PowerShell.
Remote Desktop entirely coded in PowerShell. Contribute to PhrozenIO/PowerRemoteDesktop development by creating an account on GitHub.