Archive for November, 2009
Saturday, November 28th, 2009
My company SektionEins that is specialised in web application security audits, consulting and trainings has finished the english translation of the PHP Security Poster. This poster is send out for free to interested PHP programmers (until out of stock). The poster is of DIN A0 size and details the most ...
Posted in PHP, Security | 11 Comments »
Saturday, November 28th, 2009
At yesterday's RSS09 conference I gave a slightly different version of my "Shocking News in PHP Exploitation" talk. This time I disclosed for the first time how unserializing user input in Zend Framework based applications can result in direct remote PHP code execution.
The topics of my talk were
easy ways to ...
Posted in PHP, Security | No Comments »
Saturday, November 28th, 2009
On 5th of November I gave a talk titled "Shocking News in PHP Exploitation" at the Powerofcommunity hacking/security conference in Seoul, South Korea. Afterwards I uploaded my slides to this server but only distributed the link through twitter. I totally forgot about announcing the slides in my blog.
The topics of ...
Posted in PHP, Security, korea | No Comments »