View Issue Details

IDProjectCategoryView StatusLast Update
0005077Kali Linux[All Projects] Queued Tool Additionpublic2020-06-17 14:57
Reporterwoodbine Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status acknowledgedResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0005077: phpbash - A semi-interactive PHP shell compressed into a single file.
DescriptionThis shell would be a nice addition to the webshells package.

- [Name] - phpbash webshell
- [Version] - latest, there is no git tag
- [Homepage] - https://github.com/Arrexel/phpbash
- [Download] - https://github.com/Arrexel/phpbash
- [Author] - Arrexel (https://github.com/Arrexel)
- [Licence] - Apache License 2.0
- [Description] - phpbash is a standalone, semi-interactive web shell. It's main purpose is to assist in penetration tests where traditional reverse shells are not possible. The design is based on the default Kali Linux terminal colors, so pentesters should feel right at home.
- [Dependencies] - Javascript must be enabled on the client browser for phpbash to work properly. The target machine must also allow execution of the shell_exec PHP function, although it is very simple to modify the script to use an alternate function.
- [Similar tools] - Other kinds of PHP backdoors but this is the first time I've seen one that simulates a terminal
- [Activity] - Project started < 1 year ago and last updated 9 months ago
- [How to install]
    wget https://raw.githubusercontent.com/Arrexel/phpbash/master/phpbash.min.php
    OR
    wget https://raw.githubusercontent.com/Arrexel/phpbash/master/phpbash.php
- [How to use] - Upload it to the vulnerable php server and then browse to it. See the screenshots on https://github.com/Arrexel/phpbash

Activities

g0tmi1k

2019-12-09 13:25

administrator   ~0011618

Last edited: 2020-01-06 13:19

View 2 revisions

@kali-team, please could this be packaged up.
@author, If you want to help the packaging process, you can check the documentation here ~ https://www.kali.org/docs/development/public-packaging



Something to add to the webshell package?

Issue History

Date Modified Username Field Change
2018-11-05 17:27 woodbine New Issue
2018-11-05 17:27 woodbine Status new => assigned
2018-11-05 17:27 woodbine Assigned To => sbrun
2018-11-05 17:48 sbrun Assigned To sbrun =>
2018-11-05 17:48 sbrun Status assigned => new
2018-11-05 17:48 sbrun Category Tool Upgrade => New Tool Requests
2018-11-06 15:18 g0tmi1k Summary Add phpbash to webshells => phpbash - A semi-interactive PHP shell compressed into a single file.
2019-12-09 13:25 g0tmi1k Category New Tool Requests => Queued Tool Addition
2019-12-09 13:25 g0tmi1k Note Added: 0011618
2019-12-10 11:57 g0tmi1k Severity minor => feature
2020-01-06 13:07 g0tmi1k Status new => acknowledged
2020-01-06 13:19 g0tmi1k Note Edited: 0011618 View Revisions
2020-06-17 14:57 g0tmi1k Severity feature => minor