CVE-2023-3824

My personal repository

Hi 👋, I'm Tran Ngoc Tam Latest Blog Posts State Machines in Practice: Implementing Solutions for Real Challenges How to do Canary Deployments on EKS how to use skeleton loading next 13 with shadcn ui Memory leaks in Go Array methods in reactjs Latest stack oveflow activity TitleLink Getting error "Plugin 'InnoDB' registration as a STORAGE ENGI

Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential execution of malicious code or data leakage. This vulnerability can be exploited for code execution CVE-2023-3824

PHP Malicious Phar File PoC (CVE-2023-3824) Description This Proof of Concept (PoC) demonstrates how to create a malicious Phar file in PHP and trigger a buffer overflow vulnerability Usage Creating the Malicious Phar File Create a new PHP file (eg, create_pharphp) and add the following code: <?php $phar = new Phar('maliciousphar'); $phar->startBu

FBI hacked Lockbit use this exploit.

CVE-2023-3824-PHP-to-RCE FBI hacked Lockbit use this exploit Greetings to anyone interested in how several LockBit sites were hacked by PHP CVE-2023-3824 Now I write this POC in Python 39 This POC is fully finalized and functional I'm willing to share this exploit for a nominal fee to avoid mass distribution and hacking of most sites written in PHP Download Download

Research of CVE-2023-3824 (NCA - Lockbit)

Research of CVE-2023-3824 (NCA - Lockbit) Research of CVE-2023-3824 (NCA - Lockbit) by NewLockbit (2024/03/09) The vulnerability is related to improper buffer handling in the phar_dir_read() function in the PHP phar extension This can lead to a buffer overflow and a buffer overread later The buffer overflow occurs due to the incorrect condition in the line if (to_read == 0 ||

CVE-2023-3824-POC----RCE-National-Crime-Agency-LEAK-

CVE-2023-3824-PHP-to-RCE-LockBit-LEAK Greetings to anyone interested in how several LockBit sites were hacked by PHP CVE-2023-3824 (download exploit below) Now I write this POC in Python 39 This POC is fully finalized and functional I'm willing to share this exploit for a nominal fee to avoid mass distribution and hacking of most sites written in PHP Download Download