php://input Injection [video]

php://input allows you to read raw POST data. It is a less memory intensive alternative to $HTTP_RAW_POST_DATA and does not need any special php.ini directives. php://input is not available with enctype="multipart/form-data". php://input can only be read once.


greetz to AntiSecurity


watch the video HERE


download the video HERE



./NoGe