Exploiting Arbitrary Object Instantiations in PHP Without Custom Classes
swarm.ptsecurity.com