Nobody knows...
except g4mm4
http://hackerspace.vn
Part I
gamma95x40gmail.com
$ls -la
● Captcha re-riding attack
● SQL column truncation
● Header() without exit()/die()
● Sink functions
$whoami
$whoamimorning
noon
afternoon
evening
midnight
Captcha re-riding attack
Captcha re-riding attack
Captcha re-riding attack
SQL column truncation
SQL column truncation
SQL column truncation
SQL column truncation
SQL column truncation
Ex1: (register.php)
Ex2: (Login.php)
Real world example
Header() without exit()/die()
PHP sink functions
array_diff_uassoc
array_diff_ukey
array_filter
array_intersect_uassoc
array_intersect_ukey
array_map
ar...
PHP sink functions
PHP sink functions
Questions?
Nobody knows-except-g4mm4
Upcoming SlideShare
Loading in …5
×

Nobody knows-except-g4mm4

4,765 views

Published on

The title is not related with the content =]]

Published in: Technology
0 Comments
3 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
4,765
On SlideShare
0
From Embeds
0
Number of Embeds
30
Actions
Shares
0
Downloads
0
Comments
0
Likes
3
Embeds 0
No embeds

No notes for slide

Nobody knows-except-g4mm4

  1. 1. Nobody knows... except g4mm4 http://hackerspace.vn Part I gamma95x40gmail.com
  2. 2. $ls -la ● Captcha re-riding attack ● SQL column truncation ● Header() without exit()/die() ● Sink functions
  3. 3. $whoami
  4. 4. $whoamimorning noon afternoon evening midnight
  5. 5. Captcha re-riding attack
  6. 6. Captcha re-riding attack
  7. 7. Captcha re-riding attack
  8. 8. SQL column truncation
  9. 9. SQL column truncation
  10. 10. SQL column truncation
  11. 11. SQL column truncation
  12. 12. SQL column truncation
  13. 13. Ex1: (register.php)
  14. 14. Ex2: (Login.php)
  15. 15. Real world example
  16. 16. Header() without exit()/die()
  17. 17. PHP sink functions array_diff_uassoc array_diff_ukey array_filter array_intersect_uassoc array_intersect_ukey array_map array_reduce array_udiff array_udiff_assoc array_udiff_uassoc array_uintersect array_uintersect_assoc array_uintersect_uassoc array_walk array_walk_recursive assert assert_options call_user_func call_user_func_array create_function dotnet_load forward_static_call forward_static_call_array eio_busy eio_chmod eio_chown eio_close eio_custom eio_dup2 eio_fallocate eio_fchmod eio_fchown eio_fdatasync eio_fstat eio_fstatvfs eval event_buffer_new event_set iterator_apply mb_ereg_replace mb_eregi_replace ob_start preg_filter preg_replace preg_replace_callback register_shutdown_function register_tick_function runkit_method_add runkit_method_copy runkit_method_redefine runkit_method_rename runkit_function_add runkit_function_copy runkit_function_redefine runkit_function_rename session_set_save_handler set_error_handler set_exception_handler spl_autoload spl_autoload_register sqlite_create_aggregate sqlite_create_function stream_wrapper_register uasort uksort usort yaml_parse yaml_parse_file yaml_parse_url
  18. 18. PHP sink functions
  19. 19. PHP sink functions
  20. 20. Questions?

×