Exploiting PHP Magic Methods to Read Arbitrary Files via Unserialize
<?php error_reporting(1); class Reader { public $file = 'index.php'; public function fetch($path) { return base64_encode(file_get_contents($path)); } public function __invoke() { echo $this->fetch($this->file); } } class Display { public $src; public $cfg; public function __construct($name...