Shulou(Shulou.com)05/31 Report--

This article mainly explains "what are the knowledge points of php deserialization pop chain construction", interested friends may wish to take a look. The method introduced in this paper is simple, fast and practical. Next let the editor to take you to learn "what are the knowledge points of php deserialization pop chain construction"!

Pop chain construction

General deserialization problems, vulnerabilities or places where malicious code can be injected in magic methods, we can automatically call magic methods to achieve the effect of attack. But when the injection point exists in the ordinary class method, the method called automatically before is invalid, so we need to find the relationship between the ordinary class and the magic method, sort out a logical way of thinking, through this logical way of thinking to construct a pop chain, so as to achieve the purpose of attack. So we must pay close attention to the magic method when we are doing this kind of pop problem.

Brief introduction of pop chain

It is an attribute-oriented programming method that is often used to construct a call chain. Find a series of instructions that can be called in the code in the title, and integrate these instructions into a logical code that can achieve the effect of malicious attack, that is, the pop chain (personal understanding, welcome your comments) in the construction of pop chain, magic methods are essential. Here is an example of how the pops chain is constructed, and how to construct it.

The above title code:

Welcome to index.php

First write out the classes used to form a framework, and then indicate the variables in the class. Instantiate the class used separately, why do you need to new show twice (look at the code, the first is to instantiate the show class, and the second is the show to instantiate the source= in the show class after the first instantiation).

Try to encode it in url when we serialize (there are protected-decorated attributes in this question, there will be invisible characters)

At this point, I believe that everyone has a deeper understanding of "php deserialization pop chain construction knowledge points", might as well come to the actual operation of it! Here is the website, more related content can enter the relevant channels to inquire, follow us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.