Web Hacking Pro Tips Deep Dive #1: Facebook RCE

Web Hacking 101: https://leanpub.com/web-hacking-101 Original write-up: http://4lemon.ru/2017-01-17_facebook_imagetragick_remote_code_execution.html In the first Web Hacking Pro Tips Deep Dive, I sit down with Jason Haddix from Bugcrowd to discuss a Facebook RCE discovered in October 2016 by Andrey Leonov, 4lemon. We walk through what Imagemagick and Imagetragick are, the likely methodology used to find this bug, potential problems encountered finding and exploiting it and discuss key takeaways.