GitHub - eb3095/php-shell: A simple, intutive, feature rich, php web shell for pen testing.

A simple, intuitive, feature rich, php web shell for pen testing.

Usage

To download use one of the following (or similar)

curl https://github.com/eb3095/php-shell/raw/master/php-shell.php > /var/www/html/php-shell.php

wget https://github.com/eb3095/php-shell/raw/master/php-shell.php -O /var/www/html

From there just visit the website with /php-shell.php at the end and enjoy your web based shell from the host!

Controls

• Arrow Up: History up
• Arrow Down: History down
• Enter: Run command
• Click Anywhere: Focus command prompt

History is not saved across sessions and is stored locally in the browser for the time being.

Commands

• exit: Log out
• cd: Change directory
• cls: Clear the screen
• rshell: "rshell IP PORT" open a remote shell to the specified address
• upload: Shows a file prompt then uploads the file to the current directory
• download: Download a file either relative path or full. "download FILE"

cd is unique here. If you do the following,

This will be executed as a SH/BASH command. The cd will not set the current working directory outside of the exec. However,

This will be executed as an internal command setting the PHP cwd and it is permanent (until refresh).

Credentials

The defaults are,

• Username: user
• Password: pass

The username and password are both hashed via sha512 and set in the file directly.

Screenshot