Paul's Security Weekly Subscribe

Sven Morgenroth, Netsparker

November 30, 2018

Sven will talk about PHP Object injection vulnerabilities and explain the dangers of PHP's unserialize function. He will show the format of serialized PHP Objects, explain PHP's magic methods and how to write an exploit for a PHP Object Injection vulnerability during his technical demo.

Full Show Notes: https://wiki.securityweekly.com/Episode584 To learn more about Netsparker, go to: https://www.netsparker.com/securityweekly

Full episode and show notes

Hosts

Paul Asadoorian

Principal Security Researcher at Eclypsium

https://securitypodcaster.com

Principal Consultant, Team Lead for Research at TrustedSec

https://www.trustedsec.com/

Sr. InfoSec Consultant at Online Business Sytems

https://www.obsglobal.com/

Product Security Research and Analysis Director at Finite State

@haxorthematrix

https://www.finitestate.io/

https://breakstuffforfun.com/

Retired Senior Cyber Advisor at Lawrence Livermore National Laboratory

Senior Sales Engineer at Barkly

Related

Vulnerability Management

Robot Dogs, Ivanti, SonicWall, Banshee, Telegram, Motorola, Aaran Leyland, and more. – SWN #441

January 10, 2025

Bad Cameras, Robot Dogs, Ivanti, SonicWall, Banshee, Telegram, Motorola, Aaran Leyland, and More, on this edition of the Security Weekly News.

Vulnerability Management

Threat Actors With A Thousand Names – PSW #856

January 8, 2025

DNA sequencer vulnerabilities, threat actor naming conventions, new CNAs and problems, backdoors are not secrets (again), The RP2350 is hacked!, they know where your car is, treasury department hacked, what if someone hacked license plate cameras? Tenable CEO passes away, and very awkwardly, a Nessus plugin update causes problems, who needs fact-ch...

The Journey From Unit 8200 To The Cybersecurity Startup World – Niv Braun – FS #8

January 8, 2025

In this episode of Founder Stories, Niv Braun, co-founder and CEO of Noma Security, shares his journey from Unit 8200 to the cybersecurity startup world. He discusses his motivations for entering cybersecurity, his unique approach to funding, and the importance of timing in hiring sales teams. Niv also delves into the cybersecurity ecosystem, parti...