← all labs
Expert
WEB+SSH
★★★★☆

Object Injection

Exploit PHP deserialization for remote code execution

/start deserial
14
Total Solves
28m 24s
Avg Solve Time
1
First Blood Claimed
5m 9s
Record Time

// FIRST BLOOD

cracked in 33m 15s

// TOP 10 FASTEST

#1 F03ever 5m 9s
#2 privalman 5m 20s
#3 Rocostre 11m 32s
#4 harpy 12m 4s
#5 spkz 13m 33s
#6 firestormhunter 17m 25s
#7 bussi 21m 51s
#8 「 ✦ Rimuru ✦ 」 22m 2s
#9 vwdg 23m 16s
#10 iamunknown77 28m 13s

// RELATED · Expert TIER

Sign of Weakness
WEB Forge signed URLs by extending an MD5-based MAC
★★★★☆

Spawn this box.
Capture the flag.

Join the Discord and type /start deserial to spin up your own container.