Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

A collection of PHP backdoors. For educational or testing purposes only.

Gecko Backdoor is a most powerful web php backdoor.

A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.

Collection of various files from infected hosts

Aizawa is a command-line webshell designed to execute commands through HTTP header

when i started web application security testing, i fall in love with web shell development and designed some PHP based web shells. This repository contains all my codes which i released in public.

Our powerful php Webshell created by TermuxHackz Team members

A cutting-edge PHP 7.4+ webshell designed for advanced penetration testing.

./kumasia php simple backdoor

A simple PHP web backdoor allows you to retrieve directory/file contents and upload file(s) from the local machine or remote URL.

It is a simple PHP backdoor created for educational and learning purposes.

Backdoor Collection 👾

[ ASPLAT SHELL ] WEBSHELL BYPASS SERVER 403 406 404

PHP terminal is a web-based application that allows to execute terminal commands on a server directly from a browser.

Polymorphic PHP one-line backdoor

PHP backdoors

[PHP] ACUPOFTEA WEBSHELL BYPASS SERV 403 404

This is a very simple interactive web shell

Pentestmonkeys' PHP reverse shell with dynamic host and port passing through GET request parameters

An open source browser-based software, specially designed for Researchers.

Php webshell with handy features.

A stealthy tool that injects backdoors into Joomla modules. Available on BlackArch 🕳️

This article analyzes the PHP RootKit Backdoor, explaining its features like password-protected access, command execution, file management, and PHP code execution. Learn about the security risks associated with such scripts and how ethical hackers and security researchers study them to enhance web security.

Materials from the speech "How to protect yourself from hidden web shells"

Learn about the MARIJUANA web shell, a PHP-based backdoor with stealth capabilities designed to bypass server security measures. Understand its features, potential risks, and implications for cybersecurity.

shell download

Showcasing how uploaded images can be EXIF-injected with payloads to further compromise servers, in this specific case, by stealthily installing a backdoor.

Kumasia is a simple PHP backdoor tool designed for penetration testing, offering functionalities like webshell access, file upload, command execution, and more.

Backup $ Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor