Use previously discovered credentials
Add PHP shell code to image
Obfuscate php code and upload payload