View Issue Details

IDProjectCategoryView StatusLast Update
0006220Kali LinuxQueued Tool Additionpublic2022-06-03 08:28
Reporterg0tmi1k Assigned Tosbrun  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Fixed in Version2022.3 
Summary0006220: phpsploit - Stealth post-exploitation framework
Description

[Name] - phpsploit

[Version] - v3.0

[Homepage] - https://github.com/nil0x42/phpsploit

[Download] - https://github.com/nil0x42/phpsploit/releases

[Author] - nil0x42

[License] - GNU General Public License v3.0 ~ https://github.com/nil0x42/phpsploit/blob/master/LICENSE

[Description] - Stealth post-exploitation framework

PhpSploit: Furtive post-exploitation framework
PhpSploit is a remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server. It is a post-exploitation tool capable to maintain access to a compromised web server for privilege escalation purposes.

The obfuscated communication is accomplished using HTTP headers under standard client requests and web server's relative responses, tunneled through a tiny polymorphic backdoor:

<?php @eval($_SERVER['HTTP_PHPSPL01T']); ?>

[Dependencies] - Python3, pygments, PySock, pyparsing, phpserialize

[Activity] - Jul 8, 2012 ~ 26 Dec 2019

Activities

sbrun

sbrun

2022-06-03 08:28

manager   ~0016226

version 3.2+git20220526.7dabcad-0kali1 is in kali

Issue History

Date Modified Username Field Change
2020-03-24 13:02 g0tmi1k New Issue
2020-03-24 13:02 g0tmi1k Status new => acknowledged
2020-03-24 13:02 g0tmi1k Category New Tool Requests => Queued Tool Addition
2022-04-19 12:51 sbrun Assigned To => sbrun
2022-04-19 12:51 sbrun Status acknowledged => assigned
2022-05-04 12:53 g0tmi1k Status assigned => acknowledged
2022-06-03 08:28 sbrun Status acknowledged => resolved
2022-06-03 08:28 sbrun Resolution open => fixed
2022-06-03 08:28 sbrun Fixed in Version => 2022.3
2022-06-03 08:28 sbrun Note Added: 0016226