[pef.py] Add support for unserialize bugs - Githubissues

bl4de / security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

MIT License

863 stars 177 forks source link

[pef.py] Add support for unserialize bugs #16

Closed bl4de closed 2 years ago

bl4de commented 7 years ago

Add detection of unserialize() usage

Some refs: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/ https://www.notsosecure.com/remote-code-execution-via-php-unserialize/ http://stackoverflow.com/questions/3115559/exploitable-php-functions