The latest in tech, SysOps, personal growth, scripting, servers, virtualization and databases curated for you daily.
It all started by auditing Pornhub, then PHP and ended in breaking both… We have gained remote code execution on pornhub.com and have earned a $20,000 bug bounty on Hackerone. We have found two use-after-free vulnerabilities in PHP's garbage collection algorithm. Those vulnerabilities were remotely exploitable over PHP's unserialize function.
This is a very interesting read on how Dario Weißer (@haxonaut), cutz and Ruslan Habalov (@evonide) were able to find a PHP unserialize bug to exploit and gain remote code execution on Pornhub. Pornhub’s bug bounty program is at Hackerone. In stead of actively attacking Pornhub, they took another road and attacked what Pornhub is built upon: PHP.
Read on at evonide.com: How we broke PHP, hacked Pornhub and earned $20,000.