The exploit server should not be php, otherwise, it will just execute phpinfo on the attacker side, use a python HTTP server instead Please fix this as this is misleading