ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
https://ambionics.io/blog
Apache License 2.0
3.25k stars 502 forks source link

phpggc times out #163

Closed ShutdownRepo closed 1 year ago

ShutdownRepo commented 1 year ago

Running /path/to/phpggc now times out since https://github.com/ambionics/phpggc/commit/08dc8970080040a9c977395e58147e1cc10c57f7, probably because the OS doesn't understand the sheband. Tested on Debian 12 AMD64 and ARM64. Reverting the referred commit works. Running php -d phar.readonly=0 /opt/tools/phpggc/phpggc works of course. This is only a shebang format issue

nikaiw commented 1 year ago

ah raced by @swapgs

this is however not portable and works from coreutils 8.30 according to this stackoverflow

swapgs commented 1 year ago

We can remove this dependency to coreutils by creating a proper bash wrapper around phpggc, but I don't think that's worth the "effort" as 8.30 was released quite some time ago, on July 1st, 2018.

(But then I would finally be able to run it on my machine!)

cfreal commented 1 year ago

Hello Charlie, Hello Thomas,

Thanks! I didn't properly check if it worked. It should now be fixed for everybody, provided you don't live in 2018.

ShutdownRepo commented 1 year ago

We're good 👍