tryhackme 不安全的反序列化

https://tryhackme.com/room/insecuredeserialisation
https://medium.com/@cyfernest/insecure-deserialisation-tryhackme-walkthrough-85d77a508fa8

不安全的反序列化

一些重要概念

序列化（Serialisation）

a:2:{s:5:"title";s:12:"My THM Note";s:7:"content";s:12:"Welcome to THM!";}

反序列化（Deserialisation）

https://nvd.nist.gov/vuln/detail/CVE-2021-44228
https://tryhackme.com/r/room/solar
https://www.oracle.com/security-alerts/alert-cve-2015-4852.html
https://www.tenable.com/plugins/nessus/89034