Talks·25 min
Rémi Matasse · Pierre Martin
Shows how a Livewire unmarshalling chain in Laravel can lead to remote command execution when the app key is known.
vulnerability-researchexploitingweb+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 342 talks in the archive.
1–2 of 2 talks
Talks·25 min
Rémi Matasse · Pierre Martin
Shows how a Livewire unmarshalling chain in Laravel can lead to remote command execution when the app key is known.
Talks·29 min
Rémi Matasse
Shows how PHP filter chains turn local file inclusion into code execution and blind file leaks.