BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2025//speaker//GN7FD7
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-hack-lu-2025-DNNDLV@pretalx.com
DTSTART;TZID=CET:20251023T151500
DTEND;TZID=CET:20251023T154500
DESCRIPTION:Livewire is a full-stack framework for Laravel that streamlines
  the creation of\ndynamic and interactive web interfaces by allowing devel
 opers to build\nreal-time features using PHP and Blade templates. In this 
 talk\, we will show\nhow to exploit the unmarshalling mechanism used by Li
 vewire to instantiate\narbitrary objects in order to achieve remote comman
 d execution on\nany Livewire instance as long as you are in possession of 
 the APP_KEY of the\napplication. Additionally\, we will present a new feat
 ure added to our publicly\navailable tool laravel-crypto-killer\, which fu
 lly automates the generation of\nthe payload described during the presenta
 tion.
DTSTAMP:20260423T024524Z
LOCATION:Europe
SUMMARY:Livewire : remote command execution through unmarshalling - Rémi M
 atasse\, Pierre MARTIN
URL:https://pretalx.com/hack-lu-2025/talk/DNNDLV/
END:VEVENT
END:VCALENDAR