Understanding PHP Session Deserialization Vulnerabilities
Understanding PHP Session Deserialization Vulnerabilities 0x01 Preface A recent Dianfeng Geek CTF included a session-deserialization challenge. I used it to organize PHP session deserialization's history and mechanics. 0x02 What Is a PHP Session? Before discussing PHP sessions, first understand sessions themselves…