https://github.com/0x0elliot/webshellstuff

web shells and web shell related stuff which i wrote which i use during challenges and stuff.
https://github.com/0x0elliot/webshellstuff

hacking php python web web-hacking webshell

Last synced: about 1 month ago
JSON representation

web shells and web shell related stuff which i wrote which i use during challenges and stuff.

• Host: GitHub
• URL: https://github.com/0x0elliot/webshellstuff
• Owner: 0x0elliot
• Created: 2020-11-21T17:07:06.000Z (over 5 years ago)
• Default Branch: main
• Last Pushed: 2020-11-28T07:21:08.000Z (over 5 years ago)
• Last Synced: 2025-07-20T00:38:09.799Z (11 months ago)
• Topics: hacking, php, python, web, web-hacking, webshell
• Language: Python
• Homepage:
• Size: 91.8 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
[![forthebadge made-with-python](http://ForTheBadge.com/images/badges/made-with-python.svg)](https://www.python.org/)

[![badge](https://img.shields.io/badge/For-CTF%20players-red.svg)](https://shields.io/)

[![forthebadge](https://forthebadge.com/images/badges/open-source.svg)](https://forthebadge.com)




All shells accept a GET parameter, cmd, to execute commands. 




What is upload.py?

upload.py - script to automatically upload a webshell. i like automation eh. look at the code, you will understand from the comments what to do. if you feel like uploading another file, just type "upload it [path ot the file]" and this will upload that other file. You can use it to upload any file basically.




What is gifwebshell.php?




gifwebshell.php - GIF webshell type 1, where the server only checks whether or not the magic GIF [GIF89a] bytes are present in the file. here i took a random gif, added php code inside it and added __halt_compiler() to make things simpler in the end. This repo is to just make my life easier kek. It's for those CTFs/Pentests where you are checking if you can upload a php file with GIF magic bytes and get it executed.