Hack The Box — POP Restaurant Write-up
POP Restaurant is a PHP object injection challenge from Hack The Box. Rather than exploiting a running service blindly, this challenge provides the application source code, allowing us to review the code and identify a usable gadget chain. The vulnerability lies in the unsafe use of PHP’s unserialize() function on user-controlled data. Our goal is