ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-02-22 14:43:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #246 from wuvel/master

Browse Source 
Update PHP.md
This commit is contained in:
Swissky 2020-09-25 13:30:12 +02:00 committed by GitHub
commit a57305e75f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Insecure Deserialization/PHP.md
View File

@ -111,6 +111,12 @@ Payload:
O:6:"Object":2:{s:10:"secretCode";N;s:4:"guess";R:2;} O:6:"Object":2:{s:10:"secretCode";N;s:4:"guess";R:2;}
``` ```
We can do an array to like this:
```php
a:2:{s:10:"admin_hash";N;s:4:"hmac";R:2;}
```
## Finding and using gadgets ## Finding and using gadgets
Also called "PHP POP Chains", they can be used to gain RCE on the system. Also called "PHP POP Chains", they can be used to gain RCE on the system.