Other nomination
PHP filters chain: What is it and how to use it
Chaining PHP php://filter iconv conversions so that each step prepends a chosen character, letting an attacker build arbitrary base64 content byte by byte. This turns any file inclusion or require primitive into remote code execution, and php://temp removes the need to know a valid file path on the target.
Record
- Researcher
- Rémi Matasse
- Published by
- Synacktiv
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Rémi Matasse, first published at the original source. Preserved copies are kept so the citation survives its host.