DAws: Advanced Web Shell

by do son · Published · Updated

There are multiple things that make DAws better than every Web Shell out there:

  1. Bypasses Security Systems(IPS, WAFs, etc) like Suhosin(uses up to 20 php functions just to get a command executed).
  2. Drops CGI Shells and communicate with them to bypass Security Systems.
  3. Uses the SSH Authorized Keys method to bypass Security Systems.
  4. Uses Shellshock in 2 methods to bypass Security Systems.
  5. Is completely Post Based and uses an XOR Encryption based on a random key that gets generated with every new session + private base64 functions to bypass Security Systems.
  6. Supports Windows and Linux.
  7. Finds a writeable and readable directory and moves there if it’s a web directory; DAws will output everything in that found directory.
  8. Drops a php.ini and a .htaccess file that clears all disablers to incase “suphp” was installed.
  9. Has an advanced File Manager.
  10. Everything is done automatically so there’s nothing for the user to worry about.
  11. Open Source.
  12. and much more (check the source for more information; everything is well commented)

Copyright (c) 2017 dotcppfile

Tags: dawsphp webshellwebshell