Web Lab 3: PHP unserialization¶

Task 1 (30 pts)¶

Finish the challenge Baby Hash in SchoolBus (https://zjusec.com/challenges/88)

Task 2 (20 pts)¶

Finish the challenge Child Hash in SchoolBus (https://zjusec.com/challenges/89)

Task 3 (10 pts)¶

Finish the challenge Grownup Hash in SchoolBus (https://zjusec.com/challenges/90)

Task 4 (40 pts)¶

reproduce CVE-2018-18753, analysis trace, exploitable payload.

What to submit¶

For task 1-3, your writeup.

For task 4, your analysis trace, payload, etc.