This module utilizes error-message-based reflection to retrieve the contents of the target file, and the contents are not base64-encoded before inclusion. This generally restricts its use to non-binary data. It is mainly included for demonstration purposes. Use of the SOS-12-007-YU-OOB module is strongly recommended instead.

Squiz Matrix is a PHP-based application, so directory content enumeration is not possible - a specific target file (or list of specific target files) must be specified.

This module uses Yunusov-Osipov-style out-of-band exploitation of a PHP-based application. As a result, it requires the use of an instance of She Wore A Mirrored Mask which is accessible (either directly, or via transparent TCP port-forwarding) to the target system.

This module will generally *not* be successful at sending XXE denial-of-service attacks (--dos-lulz or --dos-quad).