@darkpills cybersecurity blog

Sharing knowledge and experiments on cyber security topics.

PHP unserialize write-up with Admin RCE in All in one SEO pack (CVE-2021-24307)

2022-01-02 by Vincent MICHEL in write-ups unserialize, php, exploit, cve, write-ups

This article provides a detailed walkthrough and tips on how to exploit PHP unserialize vulnerability. It is based on a real world case: Wordpress plugin All in one SEO pack <= 4.1.0.1. It enables authenticated users with “aioseo_tools_settings” privilege (most of the time admin) to execute arbitrary code on the underlying host. Read more →

Vincent MICHEL (@darkpills)

I work as a pentester in a cyber security company. This blog aims at sharing my thoughts and experiments on different topics if it can help otheres: web and internal penetration tests, vulnerability research, write-ups, exploit development, security best practices, tooling, and so on... I previously worked as a senior software developer and switched to this wonderfull land of security :)