@SalahEo said:
There’s something I still not understand, i.e. : if I stay inactive in the connection I established the connection on the port closes (which is normal) but when I try to execute the curl command I got a 404 which specify that the file is removed so I need to go through the process again and upload the file and… , I think that when the php script is terminated it deletes itself automatically which is a good cybersecurity best practice to not leave a print in the attacked machine.
Tip for your next machines: when uploading files that keep getting deleted, if you’re using Burp Proxy you can send the upload request from Proxy > HTTP history to Repeater and resend it to upload the same file again without modifying any cookies or data.