get('run/(:any)', 'App\\Controllers\\UserController::run'); } class UserController extends Controller { public function run(string $payload): string { echo "__NYX_SINK_HIT__\n"; $cmd = "true " . escapeshellarg($payload); $out = shell_exec($cmd) ?? ''; echo $out; return $out; } }