An open API service indexing awesome lists of open source software.

https://github.com/rootshelll/bheh_php_shell

Discover BHEH_PHP_SHELL, the Black Hat Ethical Hacking PHP Backdoor Shell v1.0, a custom PHP web shell for penetration testing. Learn how to deploy and use this tool responsibly for post-exploitation tasks.
https://github.com/rootshelll/bheh_php_shell

Last synced: 2 months ago
JSON representation

Discover BHEH_PHP_SHELL, the Black Hat Ethical Hacking PHP Backdoor Shell v1.0, a custom PHP web shell for penetration testing. Learn how to deploy and use this tool responsibly for post-exploitation tasks.

Awesome Lists containing this project

README

        

# BHEH_PHP_SHELL - Black Hat Ethical Hacking PHP Backdoor Shell v1.0

![BHEH_PHP_SHELL Logo](https://r00t-shell.com/wp-content/uploads/2025/02/BHEH_PHP_SHELL.png)

## Overview

**BHEH_PHP_SHELL** is a PHP web shell designed specifically for penetration testing. It provides security professionals with a quick and effective set of tools for post-exploitation tasks after gaining access to a vulnerable web server.

Remember: this tool is intended for legitimate, ethical, and educational use only. Unauthorized access or use is illegal and unethical.

## Key Features of BHEH_PHP_SHELL

- Lightweight and easy-to-deploy PHP shell interface
- Remote execution of system commands
- File and directory management on the target server
- Efficient post-exploitation capabilities
- Fully customizable for various penetration testing scenarios

## Installation and Usage Guide

### Step 1: Upload the Shell

Use a file upload vulnerability or a secure file transfer method to upload the `bheh_shell.php` file (which contains **BHEH_PHP_SHELL**) to the target web server.

### Step 2: Access the Shell Interface

Once uploaded successfully, open your web browser and navigate to the location where **BHEH_PHP_SHELL** is hosted. For example:

http://targetsite.com/path/to/bheh_shell.php

### Step 3: Interact with BHEH_PHP_SHELL

The web interface provides various functions, such as:

- Executing system commands (e.g., `ls -la`, `whoami`, `uname -a`)
- Browsing, uploading, and downloading files
- Gathering system information and performing privilege escalation tests

For example, to list files in the current directory, simply type:

ls -la

Experiment with the interface and its commands carefully. Always document your actions during testing.

## Warnings and Important Notices

> **Warning:** **BHEH_PHP_SHELL** is for educational purposes and authorized security testing only. Unauthorized use may result in serious legal consequences.

> **Note:** Always ensure you have explicit written permission from the system owner before starting any penetration testing using **BHEH_PHP_SHELL**.

## Detailed Beginner's Guide

1. **Understanding BHEH_PHP_SHELL:** Familiarize yourself with the basics of PHP, web servers, and file upload vulnerabilities. **BHEH_PHP_SHELL** is a PHP script that allows remote execution of commands on the server.

2. **Setting Up Your Environment:** Prepare a controlled lab environment or use a virtual machine where you have permission to test.

3. **Uploading the Shell:** Use an exploitable upload form or FTP access to place the `bheh_shell.php` file (the core of **BHEH_PHP_SHELL**) on your testing server.

4. **Running Commands:** Access the shell through your browser and try basic commands like `whoami` or `uname -a` to understand its functionality.

5. **File and Directory Management:** Navigate directories, read file contents, and manage files on the server using **BHEH_PHP_SHELL**.

6. **Post-Exploitation Techniques:** Use the shell for further assessments and, if necessary, privilege escalation — all within the bounds of your authorized interaction.

This comprehensive guide is designed to help beginners safely and effectively understand and use **BHEH_PHP_SHELL**.

## Contact

For further inquiries, please contact [[email protected]](mailto:[email protected]).

![BHEH_PHP_SHELL Screenshot](https://r00t-shell.com/wp-content/uploads/2025/02/BHEH_PHP_SHELL.png)

Make sure to replace the image URLs with appropriate links for the logo and screenshots relevant to BHEH_PHP_SHELL. This README.md format is structured to provide clear and concise information for users.