跳过__wakeup()魔法函数

__wakeup()：将在序列化之后立即被调用。

漏洞原理：当反序列化字符串中，表示属性个数的值大于其真实值，则跳过__wakeup()执行。

 

---

 

参考题目：xctf-unserialize3

https://adworld.xctf.org.cn/task/answer?type=web&number=3&grade=1&id=4821&page=1

aaarticlea/png;base64,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" alt="" width="269" />

 

对于该题，先可以看到类xctf中有flag变量，并调用了__wakeup()，则考虑实例化xctf类并将其变量序列化。并猜测意图为将序列化结果输入在?code=后进行POST请求。

 

<?php
class xctf{
public $flag = '111';
pubilc function __wakeup(){
exit('bad requests');
}
}

$a = new xctf();
echo(serialize($a));
?>

// 序列化输出结果为：
// O:4:"xctf":1:{s:4:"flag";s:3:"111";}

 

正常结果输入时，会执行__wakeup()，从而输出'bad requests'，并退出脚本，因此利用漏洞绕过__wakeup()。

 

将序列化字符串中代表变量个数的数字改为大于其真实值的数字，并进行POST请求，得到结果。

aaarticlea/png;base64,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" alt="" width="415" />

得到结果。