Skip to content
PHP deserialization attacks and a new gadget chain in Laravel
blog.quarkslab.com | research | #php | #deserialization | #vulnerability | #pentest | #laravel | #pop-chain
Summary
Quarkslab explains PHP deserialization attacks and presents a new gadget (POP) chain discovered in Laravel during an engagement, along with two tricks useful for gadget hunting and a Docker lab setup.
- Published
- Collected