Bugku-a dog sentence

Link: http: // 123.206.87.240: 8010/

Explain the functions:

Explode (): Use a string to separate the entire string and return an array composed of strings. The question is separated by # And returns [0] => ....

Assert (): Execute the string in PHP code.

We can find that after the above code is executed, $ poc_2 = assert, that is, the final execution of assert ($ _ Get ['s ']

Based on experience, we can determine that the flag should be in a file.

Construct payload :? S = print_r (scandir ('./') or? S = print_r (glob ('*. txt '))

Then you can get the flag.

Bugku-a dog sentence