DEF CON 26 - Orange Tsai - Breaking Parser Logic Take Your Path Normalization Off and Pop 0Days Out

We propose a new exploit technique that brings a whole-new attack surface to defeat path normalization, which is complicated in implementation due ...