Another way to get RCE

**Is your feature request related to a problem? Please describe.**
The script currently only tests default vectors. There is a way to try and retrieve the log location to poison. Include it in the script.

Query for this: etc/apache2/sites-enabled/000-default.conf and read the response to retrieve other potentially interesting pivot points.
