conf 2024-11-06 16:45 – 17:30 La Marive EN

Iconv, Set The Charset To RCE: Exploiting Glibc To Hack The PHP Engine

Name: Black Alps 2024
Start: 2024-11-06
End: 2024-11-07
Location: La Marive, Yverdon-les-Bains

Abstract

Iconv, set the charset to RCE: exploiting the glibc to hack the PHP engine

Speaker

Charles Fol

Security Researcher

Lexfo

Charles Fol, also known as cfreal, is a security researcher at LEXFO / AMBIONICS. He has discovered remote code execution vulnerabilities targeting renowned CMS and frameworks such as Drupal, Magento, Symfony or Laravel, but also enjoys binary exploitation, to escalate privileges (Apache, PHP-FPM) or compromise security solutions (DataDog’s Sqreen, Fortinet SSL VPN, Watchguard). He is the creator for PHPGGC, the go-to tool to exploit PHP deserialization, and has been working with PHP for most of his life.

Talk

Iconv, Set The Charset To RCE: Exploiting Glibc To Hack The PHP Engine