BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2025//talk//DNNDLV
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20241023T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T030000
RDATE:20251026T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20250330T030000
RDATE:20260329T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Livewire : remote command execution through unmarshalling - Rémi 
 Matasse\, Pierre MARTIN
DTSTART;TZID=Europe/Luxembourg:20251023T151500
DTEND;TZID=Europe/Luxembourg:20251023T154500
DTSTAMP:20260813T221211Z
UID:pretalx-hack-lu-2025-DNNDLV@pretalx.com
DESCRIPTION:Livewire is a full-stack framework for Laravel that streamline
 s the creation of\ndynamic and interactive web interfaces by allowing deve
 lopers to build\nreal-time features using PHP and Blade templates. In this
  talk\, we will show\nhow to exploit the unmarshalling mechanism used by L
 ivewire to instantiate\narbitrary objects in order to achieve remote comma
 nd execution on\nany Livewire instance as long as you are in possession of
  the APP_KEY of the\napplication. Additionally\, we will present a new fea
 ture added to our publicly\navailable tool laravel-crypto-killer\, which f
 ully automates the generation of\nthe payload described during the present
 ation.
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2025/talk/DNNDLV/
END:VEVENT
END:VCALENDAR