>>996681 (OP)
that doesn't do shit
meanwhile, you can just run nikto or nmap to find known vulnerabilities and then use searchsploit to find an exploit to slightly alter and then compile and run
use that to establish a reverse shell that you use with your netcat listener, then find some sort of privilege escalation vulnerability, or if not, you can just exfiltrate data even with non-privileged accounts anyway, like maybe an apache service account or some shit idk
path of least resistance
it sure seems cool from an academic perspective to talk about abstract shit, but in the real world shit like vulnerability/service scanners and even just fucking dirtyc0w are enough for most shit
you don't need to reinvent the wheel, just enumerate and use known shit
imagine thinking errything needs to be a zero day lul