CVE-2023-3824

This repository provides a functional PoC for CVE-2023-3824, demonstrating a buffer overflow vulnerability in PHP's Phar file handling. It includes code to create a malicious Phar file and trigger the overflow via directory operations.

This repository contains a functional exploit for CVE-2023-3824, leveraging PHAR deserialization to achieve remote code execution (RCE). The exploit involves uploading a malicious PHAR file, which extracts a shell.php payload to execute arbitrary commands.

The repository contains only a README with a link to an external Codeberg repository, providing no technical details or exploit code. This is characteristic of a social engineering lure.