https://github.com/dotcppfile/DAws

Advanced Web Shell
https://github.com/dotcppfile/DAws

bypassing hacking pentesting php shell webshell

Last synced: about 1 month ago
JSON representation

Advanced Web Shell

• Host: GitHub
• URL: https://github.com/dotcppfile/DAws
• Owner: dotcppfile
• License: mit
• Created: 2015-01-24T00:55:42.000Z (almost 10 years ago)
• Default Branch: master
• Last Pushed: 2017-05-01T23:35:15.000Z (over 7 years ago)
• Last Synced: 2024-08-03T18:11:26.160Z (4 months ago)
• Topics: bypassing, hacking, pentesting, php, shell, webshell
• Language: PHP
• Size: 468 KB
• Stars: 572
• Watchers: 64
• Forks: 197
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

• awesome-hacking-lists - dotcppfile/DAws - Advanced Web Shell (PHP)

README

        
Hello everyone,

![alt tag](http://i.imgur.com/wxAH9kO.jpg)

### About

There's multiple things that makes DAws better than every Web Shell out there:

1. Bypasses Security Systems(IPS, WAFs,etc) like Suhosin(uses up to 20 php functions just to get a command executed).

1. Drops CGI Shells and communicate with them to bypass Security Systems.

1. Uses the SSH Authorized Keys method to bypass Security Systems.

1. Uses Shellshock in 2 methods to bypass Security Systems.

1. Is completely Post Based and uses a XOR Encryption based on a random key that gets generated with every new session + private base64 functions to bypass Security Systems.

1. Supports Windows and Linux.

1. Finds a writeable and readable directory and moves there if it's a web directory; DAws will output everything in that found directory.

1. Drops a php.ini and a .htaccess file that clears all disablers incase "suphp" was installed.

1. Has an advanced File Manager.

1. Everything is done automatically so there's nothing for the user to worry about.

1. Open Source.

1. and much more (check the source for more information; everything is well commented)

### Credits:

1. [dotcppfile](https://twitter.com/dotcppfile)

1. Aces who helped me code the old version of DAws

1. Vedu for checking and reporting bugs.

### Blog:

1. https://dotcppfile.wordpress.com/