Livewire - Remote Command Execution Through Unmarshalling

Explore a critical security vulnerability in Laravel Livewire through this 25-minute conference talk that demonstrates how remote command execution can be achieved through unmarshalling processes. Learn from security researchers Rémi Matasse and Pierre Martin as they dissect the technical details of this exploit, examine the underlying mechanisms that make such attacks possible, and understand the implications for web application security. Gain insights into how unmarshalling vulnerabilities can be leveraged by attackers, discover the specific attack vectors used against Livewire applications, and understand the broader security considerations for PHP frameworks that rely on serialization and deserialization processes.