Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Remote code execution in Elixir-based Paginator- 311

Peter Stöckli - AlphabotPosted 5 Years Ago
  • The main crux of this problem is taking untrusted serialized data and deserializing it. This has been a common issue with Java based applications in the passed.
  • This is a good example of a deserialization issue occurring in Elixir. "In Elixir there’s a much higher chance that such a function is executed later down the road, thanks to the Enumerable protocol of Elixir." This means that going for arbitrary deserialization to code execution is much easier in Elixir than other languages.