PHP filter encoding2019/06/19 · atom in a few seconds Edit View Language Logout / .svn/wc ....
9
Advanced XXE Exploitation Exercise 3: PHP filter encoding (App port 8023) Philippe Arteau GoSecure Countertack 19/06/2019 Slides: http://bit.ly/xxeparis
Transcript of PHP filter encoding2019/06/19 · atom in a few seconds Edit View Language Logout / .svn/wc ....
Advanced XXE ExploitationExercise 3: PHP filter encoding (App port 8023)
Philippe ArteauGoSecure Countertack
19/06/2019Slides: http://bit.ly/xxeparis
Allow the extraction of binary file
SVN metadata(older version : .svn/entries)
1. Ctrl-Shift-B
2. Grep or Open in SQLite Other file versionned
Use the same method use to read SVN metadata to read this PHP file
Can you find how to get RCE using the PHP script?
QuestionS ?
[email protected]/blog/@h3xStream @GoSecure_Inc