CTF Writeup: Complex Drupal POP Chain
10 min read
29 Jan 2019
by
Simon Scannell
A recent Capture-The-Flag tournament hosted by Insomni’hack challenged participants to craft an attack payload for Drupal 7. This blog post
will demonstrate our solution for a PHP Object Injection with a complex POP gadget chain.