Insecure Deserialisation

Walkthrough summary

Insecure Deserialisation TryHackMe walkthrough with 15 answered prompts and lab methodology notes.

Sample prompts covered

• What is the function used in PHP for serialisation?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the base score for the vulnerability CVE-2015-4852?
  Open the walkthrough page to inspect the full answer and command flow.
• Does serialisation allow only saving to a byte stream file? (yea/nay)
  Open the walkthrough page to inspect the full answer and command flow.
• What is the base64 encoded output after pickling the string You got it in Python? Utilise the notes app found at http://MACHINE_IP:5000.
  Open the walkthrough page to inspect the full answer and command flow.
• What is the output after serialising the string You got it in PHP?
  Open the walkthrough page to inspect the full answer and command flow.