| Description | Name: b374k shell
Version: 3.2.3
Homepage: https://github.com/b374k/b374k
Download: https://github.com/b374k/b374k/archive/v3.2.3.tar.gz
License: MIT
Description: This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser.
Features:
- File manager (view, edit, rename, delete, upload, download, archiver, etc)
- Search file, file content, folder (also using regex)
- Command execution
- Script execution (php, perl, python, ruby, java, node.js, c)
- Give you shell via bind/reverse shell connect
- Simple packet crafter
- Connect to DBMS (mysql, mssql, oracle, sqlite, postgresql, and many more using ODBC or PDO)
- SQL Explorer
- Process list/Task manager
- Send mail with attachment (you can attach local file on server)
- String conversion
- All of that only in 1 file, no installation needed
- Support PHP > 4.3.3 and PHP 5
It also supports customisation, allowing you to re-build with personalised modifications. |
|---|
| Additional Information | There is already a selection of (php) web shells, in /usr/share/webshells/php by default. However, these are very 'simple'.
b374k has various improved features (such has the database support - making it much easier to navigate), as well as other new features (e.g. information gathering, creating other bind/reverse shells, process manager).
Shells like this, such as c99, r57, wso2 web shells have gotten bad press over the years by how they have been used and abused. However, I choose this shell to be submitted because its:
- Been activity developed,
- There is an 'official homepage',
- It hasn't been modified/encoded to include a 'backdoor',
- The features that it offers (all of which could be used in a CTF, pentest, or remote network admin).
- The features thats are 'missing' when compared to other web shells (e.g. there IS NOT a; email bomber/DoS/DDoS/Botnet - these are not normally used in a typical pentest)
|
|---|
