webeasy

LFI POI

webkids20

Task: PHP application with serialized data in cookies controlling file inclusion. Solution: Modify base64-encoded serialized PHP array in cookie to change memorize_file parameter for LFI to read source code with flag.

$ ls tags/ techniques/
php_object_injectioncookie_deserializationlfi_via_serialized_data

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]