Crabby is a tool developed to generate webshells written in - insert your desired webshell language -. It is designed to be used by red teams to aid in lateral movement, privilege escalation, and data exfiltration.
- Web shell generation in multiple languages, see Supported Web Shells for more information.
- Customizable web shell templates.
- Stealthy web shell generation by default.
- Pluggable features templates.
Refer to the list below for the supported web shells and their current status, more information are available in the associated template folder.
- PHP (5.5+, 7.x, 8.x) - Most of the php 5.5+ code is compatible down to 5.3 but some features have not been tested.
Get the latest version of Crabby by downloading a precompiled binary from the releases page. Precompiled binaries are available for Linux and Windows.
To build Crabby from source, you will need to have Rust installed on your system. You can install Rust by following the instructions on the official website.
git clone https://github.com/ebalo55/crabby.git
cd crabby
cargo build --release --binsThe compiled binary will be available in the target/release directory.
You can also install Crabby using Cargo, the Rust package manager.
cargo install crabby-webshell-generator