RedArrow3.2 - ThinkPHP 5.0.23 Remote Command Execution Tool User Guide

1. Tool Introduction

RedArrow3.2 is a graphical tool for the ThinkPHP 5.0.23 remote command execution vulnerability, providing two main functions: single command execution and an interactive GodzillaShell-like interface. This tool supports Chinese font display, features cool RGB animation effects, and is simple and intuitive to operate.

2. Interface Components

1. Title Bar: Displays the tool name with dynamic RGB effects
2. Tab Area: Contains two tabs: "Single Execution" and "GodzillaShell"
3. Input Area: Includes URL input field and command input field
4. Button Area: Contains buttons for Execute Command, Interactive Shell, Clear Output, etc.
5. Result Display Area: Shows the results of command execution
6. Status Area: Displays connection status, execution status, and other information

3. Usage Instructions

3.1 Single Execution Function

The "Single Execution" tab is used to execute a single command and retrieve the result. Steps are as follows:

1. In the "Target URL" input field, enter the target address vulnerable to ThinkPHP 5.0.23 Default: http://node.hackhub.get-shell.com:63935/?s=captcha Note: The URL format must include the ?s=captcha parameter to trigger the vulnerability

2. In the "Execute Command" input field, enter the system command to execute Default: id Example commands:

   • id: View current user identity
   • ls: List files in the current directory
   • pwd: Display current working directory
   • cat /etc/passwd: View system user information

3. Click the "Execute Command" button or press Enter to run the command

4. The command execution result will be displayed in the result display area below

3.2 GodzillaShell Function

If the GodzillaLikeShell module is successfully loaded, the tool will provide the "GodzillaShell" function, an encrypted interactive shell connection method. Steps are as follows:

1. Switch to the "GodzillaShell" tab

2. In the "Target URL" input field, enter the vulnerable target address (shared with Single Execution)

3. Set the AES key:

   • You can manually enter an AES key
   • Click the "Generate Key" button to automatically generate a random key

4. Click the "Connect Shell" button to establish an encrypted connection

   • After successful connection, the status will change from "Not Connected" to "Connected"
   • The "Interactive Shell" button will become available

5. Click the "Interactive Shell" button to open a new interactive shell window

   • In the new window, you can execute interactive commands
   • Command results will be displayed in real-time in the window

6. You can click the "Connect Shell" button again to disconnect

4. Additional Features

1. Clear Output: Click the "Clear Output" button to clear the content in the non-interactive result display area

2. History: The tool automatically saves the last 50 executed commands and their corresponding output records

3. Export: Supports exporting non-interactive single execution results to a txt file

5. Notes

1. This tool is intended for security testing and learning purposes only. Do not use it for illegal activities

2. Ensure you have obtained authorization for the target system before use

3. When executing commands, some commands may require higher privileges to run successfully

4. For large command outputs, there may be display delays; please be patient

5. If the GodzillaLikeShell module cannot be loaded, the GodzillaShell function will be unavailable

6. On Windows 11 systems, window dragging may experience slight lag

7. The tool supports Chinese display and will automatically select an appropriate Chinese font under different operating systems

6. Common Problem Solving

1. Command execution fails: Check if the URL format is correct and if the target has the ThinkPHP 5.0.23 vulnerability

2. GodzillaShell connection fails: Confirm that the AES key is correct and that the target supports encrypted communication

3. Garbled Chinese display: The tool automatically detects the system and selects an appropriate Chinese font; manual configuration is generally not required

4. Interface lag: Try reducing the number of simultaneously executed commands and avoid heavy operations during animation

7. Keyboard Shortcuts

• Enter key: Execute the command in the current tab

• Mouse click: Supports window dragging (through special optimization to reduce animation lag)

The above is the detailed user guide for the RedArrow3.2 tool. Please strictly comply with network security laws and regulations and use this tool responsibly.