Solving PHP phar://

This exercise covers how the PHP phar:// handler can be used to gain code execution using PHP unserialize.

PRO

content

Medium difficulty

Less than an hour average completion time

280 users completed this exercise

Make sure you replace the full netcat command with the score command followed by your UUID: /usr/local/bin/score ....

Online access to this exercise is only available with PentesterLab PRO