Hands-On Web Penetration Testing with Metasploit

What is a POP chain?

In memory corruption vulnerabilities such as buffer overflows and format strings, if memory defenses such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) are in place, code reuse techniques such as Return-to-libc (ret2libc) and Return-Oriented Programming (ROP) can be used to bypass those defenses. Code reuse techniques are also viable in the case of PHP-based web applications, which use the concept of objects. One code reuse technique that can utilize the properties of the object for exploitation is Property-Oriented Programming (POP).

A POP chain is an exploitation approach for object injection vulnerabilities in web applications that exploit the ability to arbitrarily modify the properties ...