Snookums 🔸

Enumeration

The web server shows a simple PHP photo gallery 0.8.

We find https://www.exploit-db.com/exploits/48424 that says there is a remote file inclusion.

So we can try a PHP reverse shell.

Bug

Reverse shell is not connecting back, I won't lose more time on this.