added r2

exploit/binaries/r2.md

@@ -0,0 +1,31 @@
+# Radare2
+
+## Usage
+### Dynamic
+```sh
+r2 -d <binary>
+```
+* Analyze
+```sh
+aaa
+```
+* Show main
+```sh
+pdf @main
+```
+* Breakpoint
+```sh
+db 0xdeadbeef
+```
+* Show rbp-0x4
+```sh
+px @rbp-0x4
+```
+* Continue
+```sh
+dc
+``` 
+* Show registers
+```sh
+dr
+```

exploit/web/php/command_injection.md

@@ -1,6 +1,8 @@
 # PHP Command Injection
 Injecting commands to execute code on the server side via php.
 
+* [Hacktricks](https://book.hackstricks.xyz/pentesting-web/file-upload)
+
 ## Blind Command Injection
 Attacker does not register a direct response.