PHP serialisation¶

root-me challenge PHP - Serial: Get administrator access.

Techniques¶

• Insecure deserialisation

• Insecure deserialisation runbook

Counter moves¶

PHP serialisation is what this page works through. Server-side validation and least privilege are what these reduce to. Seen from the other side, this sits in the blue notes on the application layer as a target.