For educational purposes, I am in the process of pentesting a web server of mine(running on Windows) where there is a Remote File Inclusion vulnerability. I can already get simple things like command output for ipconfig and so on, displayed on the page. But now I am wondering if I can get a shell uploading some php code to that server and getting it to execute and connect to a Kali box where I can have a netcat listener open? Any ideas?

Cheers!