Skip to content

π˜€π—΅π—²π—Ήπ—Ήπ—³π—Άπ˜€π—΅ is a python script that exploits the use of chaining php filters in order to gain RCE from LFI. The script just requires a vulnerable URL including the '?parameter=' and can be customised using the trim options to make the shell more realistic and removes jargon from the output.

Notifications You must be signed in to change notification settings

DaddyBigFish/shellfish

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

8 Commits
Β 
Β 
Β 
Β 

Repository files navigation

[shellfish]

image-removebg-preview (2)

Installation

sudo cp shellfish /usr/local/bin/shellfish; sudo chmod +x /usr/local/bin/shellfish

Usage

shellfish -u "http://10.129.120.60/?page=" --trim-top 2 --trim-bottom 1

usage: shellfish [-h] -u URL [--trim-top VALUE] [--trim-bottom VALUE]

optional arguments:
  -h, --help               show this help message and exit
  -u URL, --url URL        Target URL
  --trim-top VALUE         Removes lines from top.
  --trim-bottom VALUE      Removes lines from bottom.

image

About

π˜€π—΅π—²π—Ήπ—Ήπ—³π—Άπ˜€π—΅ is a python script that exploits the use of chaining php filters in order to gain RCE from LFI. The script just requires a vulnerable URL including the '?parameter=' and can be customised using the trim options to make the shell more realistic and removes jargon from the output.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages