Know Your Enemies: Live Exploit of a PHP Engine Security Breach
summary
Shows two concrete engine failures with working demos: a null byte termination in fsockopen lets a PHP string with %00 bypass a host suffix check and fetch an internal secret from a Docker service (CVE score 5.9), and a nearly shipped zlib back door via HTTP_USER_AGENT2T treats a crafted header prefix as code and triggers zend_eval allowing remote execution because the PHP VCS was compromised and unsigned commits reached a release candidate.
AI-written summary · about
chapters (5)
- 0:00PHP security breaches
- 10:50Null byte host name flaw
- 24:28PHP zero-day back door
- 38:52Key takeaways
- 40:18Q&A
