This document discusses a Yahoo zero-day vulnerability from a code point of view. It covers bug bounty programs, remote code execution vulnerabilities like those using eval(), and provides a live example tool called WebPwn3r and demo videos. The document is authored by Ebrahim Hegazy, a cyber security analyst at Q-CERT, and is published on April 12, 2014 by the OWASP Foundation under an open license.

1. Copyright © The OWASP Foundation
Permission is granted to copy, distribute and/or modify this document
under the terms of the OWASP License.
The OWASP Foundation
OWASP
http://www.owasp.org
Yahoo Zero-Day Vulnerability
- Code Point of View
Ebrahim Hegazy
@Zigoo0
Cyber Security Analyst @Q-CERT
Ehegazy@qcert.org
12 April - 2014

2. OWASP
2
Not this type of bugs!

3. OWASP
Nor even
This type
Of hunting!

4. OWASP

5. OWASP
1- Bug Bounty Programs.
2- Remote Code Execution Vulnerability
3- Live Example – WebPwn3r
4- Demo Videos

6. OWASP
Bug Bounty Programs
https://bugcrowd.com/list-of-bug-bounty-programs/

7. OWASP
Remote Code Execution Vulnerability
Simply,
PHPCE occurs when user-supplied(GET/POST) values of the parameters
are reflected inside eval() function, that vulnerability allows attackers to
execute PHP code such as {echo system(“id”)} or any other php
function/code.

8. OWASP
Eval

9. OWASP
Live Example – WebPwn3r

10. OWASP
4- Demo Videos

11. OWASP