Stephen Rees-Carter

@valorin

Friendly Hacker, Speaker, and PHP & Laravel Security Specialist.🕵️ I write securinglaravel.com and hack stuff on stage for fun. 😈 (he/him)

Brisbane, Queensland

Joined February 2009

Pinned
Stephen Rees-Carter
@valorin
Jun 4, 2024
All my socials 👉 pinkary.com/@valorin Laravel Security: 1️⃣ Weekly Security Tips & In Depth Articles: securinglaravel.com 2️⃣ Practical Security Course: practicallaravelsecurity.com 3️⃣ Security Audits and Penetration Tests: valorinsecurity.com
Stephen Rees-Carter
@valorin
Aug 24
I've been struggling with mental and physical health issues for the past few years, and one of the things that really helped this year was finding a hobby away from technology where I get to work with my hands. Here's what I've been doing:
Gallery - Pottery by Stephen
From pottery.valorin.net
Stephen Rees-Carter
@valorin
Aug 21
unserialize() looks harmless - it just rebuilds your data - but feed it the wrong string and it'll rebuild an attacker's object, quietly turning Laravel's own code into remote code execution. Let's pull a real RCE apart. 😈 securinglaravel.com/in-depth-from-… #Laravel
In Depth: From Serialised String to RCE!
From securinglaravel.com
Stephen Rees-Carter
@valorin
Aug 13
Submitted my first CVEs directly to MITRE due to an unresponsive package maintainer for a very popular package that sits at #5 for a common search term on Packagist. Will be interesting to see how this goes.
Stephen Rees-Carter
@valorin
Aug 6
Um... that's not how risks work... 🤦 This is the rubbish being peddled by big companies selling "Cyber Insurance". 😡