How it should work for 99% of websites.
post
Wow! That's why I love analogies -- in most cases they don't make any sense especially if you are not a specialist in the theme.
Well, they do have some prose in the link that OP also posted, but yeah, it is a bit rough, especially if you're trying to understand the vulnerability..
holy fuck
70% of websites are running PHP?
are they sure?
Am I going to find a php binary in a node_modules directory
Step 5. you inject poison in your burger and send it back. Causing the cook to die and you take over as the owner of the restaurant
Wait till you learn about this new CGI thing, you'll be amazed about what it can do: https://en.wikipedia.org/wiki/Common_Gateway_Interface
Why is everybody talking about PHP lately? Am I out of the loop?
They fixed a bunch of vulnerabilities there which were known for years but neither hackers nor PHP developers cared much until recently.
Wait it was known!? They didn't just discover it and fixed it quickly?
It's not a quick or easy fix. The patch is a 10000 line nightmare. No really it's actually 10k. A lot of that is test code, but there are also significant changes to deep engine internals.
PHP did really really bad memory limit handling. Now it's only really bad.
No, they chewed snots for years because there wasn't a trivial and straightforward fix and exploit looked too "theoretically possible". But some time ago(months? year?) some company showed them a working exploit, so they started to think how to actually fix the problem. All that time they kept all in secret so hackers wouldn't know. But the fix had leaked, letting hackers to figure out what was the vulnerability in the first place, so snot-chewing was replaced with running-and-screaming. By now everything is fixed for those who cared to update\recompile. Something like that.
Most of my experience with PHP is from pen testing so most of my orders look something like <?$_GET[0]?>
The cook should be represented as the database.
Back in the 80's, my brother "hacked" a pizza place because he knew how they wrote green olives and black olives on their ticket. He dated a girl who worked there for a stint.
I don't remember how it worked and he has since passed, but it was something with the order that he would list the toppings that would fuck up the cook, so the order always came out wrong and boom! Free pizza.
the person getting the burger actually has a user agent which fetches the burger for them. Its a food delivery app and the browser is doordash/uber eats etc. Instead of packets its human beings who read a screen and understand obligations.
all 37 comments