search

ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
https://ambionics.io/blog
Apache License 2.0
3.2k stars 492 forks source link

A yii include chain here #181

Open hhhhhhhhddddddd opened 7 months ago

hhhhhhhhddddddd commented 7 months ago

\yii\base\BaseObject::__construct \yii\rbac\PhpManager::init \yii\rbac\PhpManager::load \yii\rbac\PhpManager::loadFromFile

refer https://blog.calif.io/p/craftcms-rce

but I don't have enough time to coding now, so just put chain here for somebody to working