1
echo "test";

1
2
3
4
5
6
7
8
<?php
//Laura Marcelca Camacho Vásquez
//Calculo de Pi
//Lenguaje:PHP
 
$i = 1;
$signo = 1;
$pi = 0;
 ...

1
2
3
4
5
6
7
8
9
<?php
 
$code = 'AK9edGBHamwvyzEmgAE59c34XY/sgFX91VBNCddxGQFtZ1QkBPfBOPbo6DKRELGcfnbYkuIasYZh+GqXnuz/dFDk5qRKq1wl8ANJFMUsOfyIzvS+dvsC7p3UNG58DXzni0zVvsrt6z0Hsh3bqenIrSBJt3Gskb9aq2bHbqF2KEIm3p7gCNRCqd5BP9JD9iEnaLrepDte3WMbqT0dZ8TLoFFDNhpVXOXD7+qNRjk58tFUW8gHbYFt6cTPt1Rc+pTz0Q563jQbpQmLkT2RxYo3kzxwO+BLFUxdgmaGrikCY2G7p5EG6zbSEWQ+Nmfr4sLWvdyyDkcobCgL42BdwYKJ4fsXxGigiCy2dZdDA8KyqOqwpydmxfWORsvu3OnGTw==';
 
$decode = base64_decode($code);
 
$viewable = bin2hex($decode);
 
var_dump($viewable);
 ...

1
2
3
4
5
6
7
8
9
<?php
 
$code = 'AK9edGBHamwvyzEmgAE59c34XY/sgFX91VBNCddxGQFtZ1QkBPfBOPbo6DKRELGcfnbYkuIasYZh+GqXnuz/dFDk5qRKq1wl8ANJFMUsOfyIzvS+dvsC7p3UNG58DXzni0zVvsrt6z0Hsh3bqenIrSBJt3Gskb9aq2bHbqF2KEIm3p7gCNRCqd5BP9JD9iEnaLrepDte3WMbqT0dZ8TLoFFDNhpVXOXD7+qNRjk58tFUW8gHbYFt6cTPt1Rc+pTz0Q563jQbpQmLkT2RxYo3kzxwO+BLFUxdgmaGrikCY2G7p5EG6zbSEWQ+Nmfr4sLWvdyyDkcobCgL42BdwYKJ4fsXxGigiCy2dZdDA8KyqOqwpydmxfWORsvu3OnGTw==';
 
$decode = base64_decode($code);
 
$viewable = bin2hex($decode);
 
var_dump($viewable);
 ...

1
2
3
4
5
6
7
8
9
<?php
 
$code = 'AK9edGBHamwvyzEmgAE59c34XY/sgFX91VBNCddxGQFtZ1QkBPfBOPbo6DKRELGcfnbYkuIasYZh+GqXnuz/dFDk5qRKq1wl8ANJFMUsOfyIzvS+dvsC7p3UNG58DXzni0zVvsrt6z0Hsh3bqenIrSBJt3Gskb9aq2bHbqF2KEIm3p7gCNRCqd5BP9JD9iEnaLrepDte3WMbqT0dZ8TLoFFDNhpVXOXD7+qNRjk58tFUW8gHbYFt6cTPt1Rc+pTz0Q563jQbpQmLkT2RxYo3kzxwO+BLFUxdgmaGrikCY2G7p5EG6zbSEWQ+Nmfr4sLWvdyyDkcobCgL42BdwYKJ4fsXxGigiCy2dZdDA8KyqOqwpydmxfWORsvu3OnGTw==';
 
$decode = base64_decode($code);
 
$viewable = bin2hex($decode);
 
var_dump($viewable);
 ...

1
2
3
4
5
6
7
8
9
<?php
 
  $hi = fopen('php://stdin', "r");
  $ho = fopen('php://stdout', "w");
 
  while (true) 
  {
    fscanf($hi, "%d", $n);
    if ($n == 42)
 ...

1
2
3
4
5
6
7
8
9
<?php
 
  $hi = fopen('php://stdin', "r");
  $ho = fopen('php://stdout', "w");
 
  while (true) 
  {
    fscanf($hi, "%d", $n);
    if ($n == 42)
 ...

1
2
3
4
5
6
7
8
9
<?php
 
  $hi = fopen('php://stdin', "r");
  $ho = fopen('php://stdout', "w");
 
  while (true) 
  {
    fscanf($hi, "%d", $n);
    if ($n == 42)
 ...

1
2
3
4
5
6
7
8
<?php
 
$var = 'tennis';
 
$var.=' is cool.';
 
echo $var;
?>

1
echo 'hello';

1
2
3
4
5
$var = 'tennis';
 
$var.=' is cool.';
 
echo $var;

1
2
3
4
5
6
7
8
<?php
 
 
$tar=array ('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot');
 
 
echo $tar['cook2'];
?>

1
2
3
4
5
6
7
8
<?php
 
 
$tar=array ('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot');
 
 
echo $tar['dishwasher'];
?>

1
2
3
4
5
6
7
8
9
<?php
 
 
$tar-array
('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot');
 
 
echo $tar['dishwasher'];
?>

1
2
3
4
5
6
7
8
9
<?php
 
 
$tar-array
('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot')
 
 
echo $tar['dishwasher'];
?>

1
2
3
4
5
6
7
8
9
<?php
 
 
$tar-array
('dishwasher'=>'eric',
'cook1'=>'doug',
'cook2'=>'bruce',
'cook3'=>'elliot')
 
 ...

1
2
3
4
5
6
7
8
9
<?php
 
 
$tar-array
('dishwasher'=>'eric',
'cook1'=>'doug',
'cook2'=>'bruce',
'cook3'=>'elliot');
 
 ...

1
2
3
4
5
6
7
8
<?php
 
 
$tar-array('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot');
 
 
echo $tar['dishwasher'];
?>

1
2
3
4
5
6
7
8
<?php
 
 
$tar-array('dishwasher'=>'eric','cook1'=>'doug','cook2'=>'bruce','cook3'=>'elliot')
 
 
echo $tar[dishwasher];
?>

1
2
3
4
5
6
7
8
<?php
$tar[dishwasher]="eric";
$tar[cook1]="doug";
$tar[cook2]="bruce";
$tar[cook3]="elliot";
 
echo $tar[dishwasher];
?>

1
2
3
4
5
6
7
8
<?php
$tar[dishwasher]="eric";
$tar[cook1]="doug";
$tar[cook2]="bruce";
$tar[cook3]="elliot";
 
echo $tar[dishwaser];
?>

1
2
3
4
5
6
7
8
9
<?php
/* This script generates a POST header that makes PHP 5.4.0RC6 *64 bit* try to execute code at 0x1111111111111111
(C) Copyright 2012 Stefan Esser
PHP 5.3.9 requires you to know the address of a writable address filled with NULL.
32bit requires you to create a fake 32bit Hashtable instead of a 64bit one
Because this vulnerability also allows leaking memory addresses ASLR can be "semi"-defeated. This means
around 4000
tries = 4000 requests = 4000 crashes are enough to bruteforce code addresses to execute arbitrary code despite
ASLR/NX
 ...

1
2
3
4
5
6
7
8
<?php
$tar[0]="eric";
$tar[1]="doug";
$tar[2]="bruce";
$tar[3]="elliot";
 
echo $tar[1];
?>

1
2
3
4
5
6
7
8
<?php
$tar[0]="eric";
$tar[1]="doug";
$tar[2]="bruce";
$tar[3]="elliot";
 
echo $tar[3];
?>

1
2
3
4
5
6
7
8
<?php
$tar[0]="eric"
$tar[1]="doug"
$tar[2]="bruce";
$tar[3]="elliot";
 
echo $tar[3];
?>

1
2
3
<?php
 
print "GA";

1
2
3
4
5
<?php
 
$submission_id = 5;
 
echo(substr(sha1($submission_id), 0, 9));

1
2
3
4
5
<?php
 
$submission_id = 5;
 
echo(substr(sha1($submission_id), 0, 9);

1
2
3
4
5
<?php
 
$submission_id = 5;
 
echo(sha1($submission_id));

1
2
3
4
5
6
 
 
<?php
$tar=array('eric','doug','bruce','elliot');
echo $tar[3];
?>