Looting the Symfony profiler with EOS

Comments, chapters, ... Slides Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

151 views

Based on https://www.synacktiv.com/posts/pentest/looting-symfony-with-eos.html. Symfony is a popular open source PHP framework to create web applications. When configured with development parameters, Symfony exposes a sensitive component: the web profiler. This interface implements debug features to help developers identifying bugs while working on the application. However, as an attacker, multiple pieces of information are available to loot: configuration files, user credentials and even the application source code.

Exposing such features in a production environment is very dangerous and to gather all this intel, Synacktiv recently developed an open source tool named EOS (https://github.com/synacktiv/eos).

In this presentation, I would like to describe the different features provided by the profiler and how EOS exploits them to extract the valuable information.

Speaker

Matthieu Barjole (Synacktiv)

Creation date: June 30, 2020
Speakers: Matthieu Barjole
License: CC BY-SA v4
Links:

Other media in the channel "2020"