$ tldr PortSwigger · Insecure Deserialization
Insecure Deserialization
Using PHAR deserialization to deploy a custom gadget chain
PortSwigger Web Security Academy lab: Using PHAR deserialization to deploy a custom gadget chain. Tema: Insecure Deserialization.