Summary A "Brunnerne Hosting" customer portal exposed a legacy reservation import form that fed user-controlled, base64-encoded data into unserialize(). Getting a flag required chaining three independ
exploitnotes.hashnode.dev7 min readNo responses yet.