Deep Dive Into Livewire, From Weak Typing To Pre-Authenticated RCE
Where
Talks
hack.lu 2026
Duration
—
Walks through how weak typing in Livewire leads to a pre-authenticated remote code execution flaw.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Talks·38 min
Lyra Rebane
Shows how CSS alone can spoof webmail interfaces, bypass email sanitizers, and exfiltrate data through SVG filters.
webappsecvulnerability-research+2
Talks·25 min
Rémi Matasse · Pierre Martin
Shows how a Livewire unmarshalling chain in Laravel can lead to remote command execution when the app key is known.
vulnerability-researchexploitingweb+2
Talks·28 min
Paul Gerste
Shows how integer truncation in database wire protocols lets attackers smuggle SQL statements past application query handling.
vulnerability-researchappsecvulnerabilities+2