Comments

3 responses to “CONFidence 2013: PHP Object Injection Revisited”

1. 

   29 May 2013

   Kuzya

   Вернусь с отдыха, подробно разберу всю презентацию! Спасибо!
2. 

   29 May 2013

   /fd

   hi raz0r,
   I’ve seen your open_basedir bypass with soap wsdl cache, it’s amazing.
   However, it seems that the name of a cache file cannot be controlled.
   Is it really exploitable or did i miss something? Thanks
3. 

   30 May 2013

   Raz0r

   Unfortunately you can control only the directory.

This site uses Akismet to reduce spam. Learn how your comment data is processed.