Tubidy
Arbitrary object injection in PHP

Arbitrary object injection in PHP

04:26 | 326 views |
Download MP3

Related Videos

Using application functionality to exploit insecure deserialization

Using application functionality to exploit insecure deserialization

Authentication bypass via flawed state machine

Authentication bypass via flawed state machine

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

Authentication bypass via information disclosure

Authentication bypass via information disclosure

Excessive trust in client-side controls

Excessive trust in client-side controls

Using PHAR deserialization to deploy a custom gadget chain

Using PHAR deserialization to deploy a custom gadget chain

Cross site WebSocket hijacking

Cross site WebSocket hijacking

Insufficient workflow validation

Insufficient workflow validation

Manipulating the WebSocket handshake to exploit vulnerabilities

Manipulating the WebSocket handshake to exploit vulnerabilities

High level logic vulnerability

High level logic vulnerability

Inconsistent handling of exceptional input

Inconsistent handling of exceptional input

Source code disclosure via backup files

Source code disclosure via backup files

Modifying serialized data types

Modifying serialized data types

Username enumeration via subtly different responses

Username enumeration via subtly different responses

Internal cache poisoning

Internal cache poisoning

Information disclosure in version control history

Information disclosure in version control history

Exploiting Ruby deserialization using a documented gadget chain

Exploiting Ruby deserialization using a documented gadget chain

Inconsistent security controls

Inconsistent security controls

Parameter cloaking

Parameter cloaking

Web cache poisoning via a fat GET request

Web cache poisoning via a fat GET request