Enumerate PHP Info: http:///phpinfo.php - get version info searchsploit php cgi Common exploit: exploit/multi/http/php_cgi_arg_injection