README.md

Serialization (PHP Object Injection)

This set of challenges is about PHP Object Injection. The goal is to craft a PHP object to exploit an unserialize() call.

Challenges (in rough order of subjective difficulty):

• metactf
• free-as-in-beer
• vpn
• lolshop
• 1024