pimterry/Example vulnerable PHP code

Created April 13, 2014 13:55

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/pimterry/10585236.js"></script>
Save pimterry/10585236 to your computer and use it in GitHub Desktop.

Download ZIP

Stop your web stack sabotaging your security - exploit snippets

Raw

Example vulnerable PHP code

$loginOk = (crypt($passwordInput, $salt) == $previouslyCryptedPassword));

Raw

Example vulnerable Rails class

	class Post < ActiveRecord::Base
	serialize :tags
	end

Raw

Postgres command line exploit

psql --host=example.com --dbname="-r /var/lib/postgresql/data/db"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment