Course
In this lab, you will explore how to bypass suffixes added to user inputs in PHP, particularly focusing on the use of NULL bytes and URL manipulation techniques. This exercise simulates the behavior of older PHP versions to demonstrate a vulnerability that has been fixed in PHP 5.3.4.
Skills covered
Injection
Operating System
CWE-20, CWE-447
Included with PRO
Full course content
2 videos
Common mistakes
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.