Blade is a webshell connection tool based on console, currently under development and aims to be a choice of replacement of Chooper. Chooper is a very cool webshell client with wide types of server-side...
ShellComm is a simple interactive CLI remote shell communicator. Sometimes, during a pentest, you get to upload a shell but you can’t upload a heavy, complex one for whatever reason. In those situations, you can...
LDAP-credentials-collector-backdoor-generator Idea About This script Last year, during external network VAPT of a client I got inside the network using vulnerable web application. Once I was inside, I observed there is an intranet application...
b374k PHP Webshell This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser...
Password Attacks / Web Exploitation / Web Maintaining Access / WebApp PenTest
by do son · Published September 10, 2017 · Last modified May 6, 2018
WPForce – WordPress Attack Suite ABOUT: It is a suite of WordPress Attack tools. Currently, this contains 2 scripts – WPForce, which brute forces logins via the API, and Yertle, which uploads shells once...
Exploitation / Information Gathering / Maintaining Access / Network PenTest / Post Exploitation / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 6, 2017
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others. Contents Contents Network Analysis IP Whois DNS Identify Live Hosts IDS/IPS...
Web Exploitation / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 4, 2017 · Last modified April 3, 2018
LFI Suite is a totally automatic tool able to scan and exploit Local File Inclusion vulnerabilities using many different methods of attack, listed in the section Features. Features Works with Windows, Linux and OS X Automatic...
Metasploit / Web Maintaining Access / WebApp PenTest
by do son · Published June 30, 2017 · Last modified August 2, 2017
Apache ActiveMQ Apache ActiveMQ ™ is the most popular and powerful open source messaging and Integration Patterns server. Apache ActiveMQ is fast, supports many Cross Language Clients and Protocols, comes with easy to use Enterprise Integration Patterns and many advanced features while...
Web Maintaining Access / WebApp PenTest
by do son · Published June 30, 2017 · Last modified October 10, 2021
PHP-backdoors A collection of PHP backdoors. For educational and/or testing purposes only. Notes The deobfuscated folder does not necessarily contain deobfuscated versions of the backdoors you can find in the obfuscated folder. To deobfuscate...
Web Maintaining Access / WebApp PenTest
by do son · Published June 25, 2017 · Last modified August 1, 2017
Normally, you often write webshell that includes numbers and letter like below: For bypass WAF, you can use some techniques to re-write your webshell. Idea First, clear ideas. My core idea is to non-letter,...
Web Maintaining Access / WebApp PenTest
by do son · Published June 21, 2017 · Last modified July 31, 2017
snodew is a PHP reverse shell backdoor which uses a small suid binary to escalate privileges on connection snodew is made mainly to work alongside vlany but can also be setup as a regular root backdoor....
Web Maintaining Access / WebApp PenTest
by do son · Published June 19, 2017 · Last modified July 31, 2017
ShellStack is a PHP based backdoor management tool. This Tool comes handy for “HACKERS” who wish to keep a track of every website they hack. The tool generates a backdoor file which you just...
Password Attacks / Web Maintaining Access / WebApp PenTest
by do son · Published June 10, 2017 · Last modified March 17, 2018
Cheetah is a dictionary-based brute force password webshell tool, running as fast as a cheetah hunt for prey. Cheetah’s working principle is that it can submit a large number of detection passwords based on...
Web Maintaining Access / WebApp PenTest
by do son · Published May 30, 2017 · Last modified October 10, 2021
There are multiple things that make DAws better than every Web Shell out there: Bypasses Security Systems(IPS, WAFs, etc) like Suhosin(uses up to 20 php functions just to get a command executed). Drops CGI...
Web Maintaining Access / WebApp PenTest
by do son · Published April 26, 2017 · Last modified November 5, 2017
Weevely is a webshell management tool written in python. Weevely tutorial article describes from basic to advance its most function on your penetration testing. Weevely is available on Kali Linux. Weevely is a command...
Secure Your Connection
