webmedium

Старая версия (Old Version)

hackerlab

Task: Web challenge with PHP page parameter and old PHP version. Solution: Exploit PHP assert() code injection vulnerability in PHP < 7.0 where string arguments are evaluated as code, achieving RCE.

$ ls tags/ techniques/
rcelfiphpapachecode_injectionassertphp5deprecated_functionstring_evaluationdebian
PHP assert() code injection (PHP < 7.0)String argument evaluation exploitationLFI to RCE escalation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]