From f2e86bb7c6672c513b54fdd484483ecb96b414fc Mon Sep 17 00:00:00 2001 From: pe3zx Date: Fri, 30 Mar 2018 15:51:00 +0700 Subject: [PATCH] [Articles][Web Application Security] Why You Should Never Pass Untrusted Data to Unserialize When Writing PHP Code --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 06f2ab0..ce7ed1b 100644 --- a/README.md +++ b/README.md @@ -652,6 +652,10 @@ My curated list of awesome links, resources and tools - [BRUTE XSS - Master the art of Cross Site Scripting](https://brutelogic.com.br/blog/) - [XSS Cheat Sheet](https://leanpub.com/xss) +### PHP Object Injection + +- [Why You Should Never Pass Untrusted Data to Unserialize When Writing PHP Code](https://www.netsparker.com/blog/web-security/untrusted-data-unserialize-php/) + ### SQL Injection - [MySQL UDF Exploitation](https://osandamalith.com/2018/02/11/mysql-udf-exploitation/)