[Weevely v1.1] Stealth tiny PHP web shell
Weevely is a stealth PHP web shell that provides a telnet-like console. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones.
Weevely is currently included in Backtrack and Backbox and all the major Linux distributions oriented for penetration testing.
- More than 30 modules to automate administration and post exploitation tasks
- Execute commands and browse remote filesystem, even with PHP security restriction
- Audit common server misconfigurations
- Run SQL console pivoting on target machine
- Proxy your HTTP traffic through target
- Mount target filesystem to local mount point
- Simple file transfer from and to target
- Spawn reverse and direct TCP shells
- Bruteforce SQL accounts through target system
- Run port scans from target machine
- And so on..
- Backdoor communications are hidden in HTTP Cookies
- Communications are obfuscated to bypass NIDS signature detection
- Backdoor polymorphic PHP code is obfuscated to avoid HIDS AV detection
[Weevely v1.1] Stealth tiny PHP web shell
![[Weevely v1.1] Stealth tiny PHP web shell](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvTemoqK-mnyC8A-g_q5fZw5Hd_MX8Hcw50rZVDXk_TFwqhc39Dr6sLQQ3Ei4cns0tuS9g8Sn4qpU-6CvwIbPnma0_nl5S4gaQ9egVM5ECl3tojZSsVAcuWxvtkW8nlX-N02LAuiBlH9g/s72-c/Weevely.png)
Reviewed by Zion3R
on
10:12 PM
Rating:
Reviewed by Zion3R
on
10:12 PM
Rating:
