[极客大挑战 2019]Havefun

查看源代码，发现关键注释信息

$cat=$_GET['cat'];
        echo $cat;
        if($cat=='dog'){
            echo 'Syc{cat_cat_cat_cat}';

payload:?cat=fog