Rapid7

module

OS Command Exec, Unix Command Shell, Reverse TCP (via socat)

Disclosed
N/A
Created
Jun 9, 2025

Description

Execute an OS command from PHP.

Creates an interactive shell via socat

Authors

Spencer McIntyre
jheysel-r7

Platform

PHP

Architectures

php

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use payload/php/unix/cmd/reverse_socat_tcp
msf payload(reverse_socat_tcp) > show actions
...actions...
msf payload(reverse_socat_tcp) > set ACTION < action-name >
msf payload(reverse_socat_tcp) > show options
...show and set options...
msf payload(reverse_socat_tcp) > run

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.