Hack The Box: (UpDown) Upload Phar File for RCE

What is Phar Deserizalition to Remote Code Execution? Phar file also known as PHP Archive will normally contain metadata that is written in a serialized format. As a result, the bad guys can abuse the vulnerability related to deserialized that wrote inside the PHP code. For those who are not familiar with PHP functions that […]

The post Hack The Box: (UpDown) Upload Phar File for RCE appeared first on Threatninja.net.

Read More >>