Collected research
PHP filters chain: What is it and how to use it
Chaining PHP php://filter iconv conversions so that each step prepends a chosen character, letting an attacker build arbitrary base64 content byte by byte. This turns any file inclusion or require primitive into remote code execution, and php://temp removes the need to know a valid file path on the target.
Record
- Researcher
- Rémi Matasse
- Published by
- Synacktiv
- Topic
- Server
In the archive
Related sources
- Foundational filter-chain writeup
- Filter-chain generator
- Laravel cookie tool
- Hack.lu 2023: PHP Filter Chains: How To Use It - Rémi Matasse (@_remsio_)
Tags
This page is the archive's own catalogue record. The research is the work of Rémi Matasse, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .