domains / families / security / exploiting-type-juggling-vulnerabilities

exploiting-type-juggling-vulnerabilities

separate

Exploits PHP type juggling vulnerabilities caused by loose (==) comparison

When to use

• When testing PHP web applications for authentication bypass vulnerabilities
• During assessment of password comparison and hash verification logic
• When testing applications using loose comparison (== instead of ===)
• During code review of PHP applications handling JSON or deserialized input
• When evaluating input validation that relies on type-dependent comparison

Skill page

Source