get_defined_vars();

[mike-bailey]

Hello,

I love the tool! I've produced a Dockerfile that I should be able release once I find an easy way to manage it without host mounts. I was wondering if there was any way to modify it to print defined variables? I know it would be noisy (esp. superglobals) and some people probably wouldn't want to but I know I would personally.

Considering a scenario:

$evil_pass = "bad";
eval(gzinflate(usual_crap("bad_code")));

the evalhook would not show the evil_pass despite it being potentially important. I know these are relatively trivial but the better a solution, the more all-in-one this tool can be. Even if it's injecting var_dump(get_defined_vars()) to the end of a compiled string.

[mike-bailey]

For what it's worth I've tried this a few times with strcat and other hackarounds and it went horrible as I'm trash at C.

[mike-bailey]

@impredicative anything to add?

[Mandofskii]

Hi @mike-bailey do you code var_dump(get_defined_vars()) injector ?