• Automatically downloads a reverse shell from revshells.com based on the attacker's IP and port.
• Uploads the reverse shell using the vulnerable bigUpload.php endpoint.
• Silently triggers the shell and opens a Netcat listener for direct access.

Enhancement by Divine Clown:

• All intermediate steps (downloading shell, uploading, etc.) are hidden, showing only the resulting reverse shell for streamlined use.

Usage

Parameters:

• -i <attacker_ip>: The attacker's IP address for the reverse shell.
• -p <port>: The port where the Netcat listener will be started.
• -h <host_link>: The full URL of the vulnerable Chamilo LMS instance.

Example:

Prerequisites

• Netcat installed on your machine.
• Ensure the target Chamilo LMS version is vulnerable (≤ v1.11.24).
• Proper permissions to perform penetration testing or exploitation.

Technical Breakdown

1. The script downloads a reverse shell from revshells.com, dynamically generating it based on the attacker's IP and port.
2. The reverse shell is uploaded to the vulnerable bigUpload.php endpoint.
3. The uploaded file is executed by accessing its URL on the server.
4. A Netcat listener is started, and once the file is triggered, a reverse shell connection is established, giving the attacker command-line access.

Legal Disclaimer

This tool is intended solely for educational purposes and testing environments where you have explicit permission to exploit vulnerabilities. Unauthorized access to systems is illegal and may result in criminal charges. The authors will not be held responsible for any misuse or damage caused by this script.

Credits

• Original Exploit Author: Ziad Sakr @Ziad-Sakr
• Enhancements and Refinements: ME(Divine Clown)

Feel free to modify the README further if you want to include any additional information or formatting! Let me know if you need anything else.