Advanced Local and Remote File Inclusion - PHP Wrappers

Поділитися
Вставка
  • Опубліковано 16 лис 2024

КОМЕНТАРІ • 14

  • @NetsecExplained
    @NetsecExplained  2 роки тому

    Thanks for watching! What topic would you like to see us cover next?

  • @tylerjimmy6946
    @tylerjimmy6946 7 місяців тому

    Wonder why I haven’t come across this channel since!!! It took me 5 mins into the video for me to be a subscriber. I absolutely love this ❤️❤️❤️

  • @bitfirewall
    @bitfirewall Рік тому

    Not enough PHP devs fully appreciate how powerful file wrappers are ...

  • @blackoutzombies
    @blackoutzombies 9 місяців тому

    Man I watched only this video and it was enough for me to subscribe, your contente is awesome

  • @unknown_exploit
    @unknown_exploit Рік тому

    Excellent Video!!

  • @oddandrandom5771
    @oddandrandom5771 2 роки тому +1

    ty for the new video 🙏

  • @austinrhoads
    @austinrhoads 2 роки тому

    Awesome! Thanks for the content!

  • @Cossaw
    @Cossaw 2 роки тому

    Love this channel

  • @Ian-pe9rj
    @Ian-pe9rj 10 місяців тому

    I’d love to see a video on how to prevent the exposure of the credentials. What methods are used to prevent this issue?

    • @NetsecExplained
      @NetsecExplained  10 місяців тому

      To prevent the credential exposure in here, you should follow standard security practices. Never write credentials in any file on disk. Instead, use an environment variable or something like Hashicorp Vault as your secrets manager. The application should make a request to the vault to grab the credentials it needs.

  • @0xmkay
    @0xmkay 2 роки тому

    Thank you very much

  • @deidyomega
    @deidyomega 2 роки тому

    Great job, I'd be curious if you have anything similar for python, with either django, flask, or fastapi.
    In php its common to include entire php files, whereas with python you usually go the other direction, modifying html files on the fly.

    • @NetsecExplained
      @NetsecExplained  2 роки тому +1

      You can't actually do this natively in Python. Python web applications load the entire application in memory. File inclusion requires application code the be imported into the application and executed that way. You can do it with scripts like ASP, JSP, and PHP files. You can also perform a variation of it using CGI scripts, but that gets into something else entirely.