CTFshow php特性 web136

---

源码

<?php
error_reporting(0);
function check($x){
   
    if(preg_match('/\\$|\.|\!|\@|\#|\%|\^|\&|\*|\?|\{|\}|\>|\<|nc|wget|exec|bash|sh|netcat|grep|base64|rev|curl|wget|gcc|php|python|pingtouch|mv|mkdir|cp/i', $x)){
   
        die('too young too simple sometimes naive!');
    }
}
if(isset($_GET['c'])){
   
    $c=$_GET['c'];
    check($c);
    exec($c);
}
else{
   
    highlight_file(__FILE__);
}