CVE-2019-9081

This PoC demonstrates a deserialization vulnerability in Laravel (CVE-2019-9081) by crafting a malicious serialized object that executes arbitrary commands upon deserialization. The exploit leverages the `PendingCommand` class to trigger command execution via the `system` function.

This PoC demonstrates a deserialization vulnerability in Laravel (CVE-2019-9081) by crafting a malicious serialized object that executes arbitrary commands (e.g., `cat /etc/passwd`) when deserialized. The exploit leverages the `PendingCommand` class to trigger command execution via the `__destruct` magic method.

This PoC exploits a deserialization vulnerability in Laravel (CVE-2019-9081) by crafting a malicious serialized object. The payload leverages the `PendingCommand` class to execute arbitrary commands (e.g., `system('id')`) upon deserialization.

This repository contains a functional exploit PoC for CVE-2019-9081, a Laravel framework deserialization vulnerability. The exploit generates a malicious serialized payload that, when deserialized, executes arbitrary commands via the `PendingCommand` class.