Comment by devkit1
12 hours ago
You, the white-hat hacker would be concerned that your attack exploits payload will be logged either by the potentially malicious site operator who could be using this to gather various working exploits, or by other bad actors who already exploited the site before you. Unless your exploit itself is already well known and fully public that is.
Your exploit payload for a patched vulnerability?
PHP runs something like 75% of major websites. It's unlikely they have all been patched.