PHP

Web Exploitation

Local File Inclusion (LFI) Fundamentals: Path Traversal, /etc/passwd, and Filter Bypasses

A practical introduction to Local File Inclusion: path traversal, reading /etc/passwd, null byte tricks, and PHP filter bypasses, plus defenses.
2026.02.05
Web Exploitation
Security

Remote File Inclusion (RFI) Fundamentals: From allow_url_include to RCE

Learn how Remote File Inclusion abuses PHP wrappers and allow_url_include to achieve remote code execution, plus blue-team defenses.
2026.02.03
SecurityWeb Exploitation
Web Exploitation

From LFI to RCE: Practical Escalation Techniques

How to escalate a PHP Local File Inclusion into remote code execution via log poisoning, php://filter, data wrappers, sessions and /proc.
2026.02.01
Web Exploitation
Web Exploitation

Insecure Deserialization: Exploiting PHP and Java Object Injection

How PHP unserialize and Java deserialization lead to RCE via magic methods and gadget chains, plus blue-team defenses.
2026.01.24
Web Exploitation